检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-XFHH-RX56-RXCR CVE-2019-1020001 | Path Traversal vulnerability that affects yard | 高危 | RubyGemsyard | 已审查 | 2019-07-02 23:28 | 2024-03-07 08:30 |
| GHSA-38CG-GG9J-Q9J9 CVE-2019-3875 | Improper Certificate Validation and Insufficient Verification of Data Authenticity in Keycloak |
当前筛选结果 366,391 条 · 时间按北京时间显示
| 中危 |
Mavenorg.keycloak:keycloak-core |
| 已审查 |
| 2019-06-28 01:25 |
| 2021-08-17 23:33 |
| GHSA-28HP-FGCR-2R4H | Cross-Site Scripting via JSONP | 中危 | npmangular | 已审查 | 2019-06-28 01:25 | 2021-02-25 02:32 |
| GHSA-MXJR-XMCG-FG7W | Arbitrary Code Injection in mobile-icon-resizer | 中危 | npmmobile-icon-resizer | 已审查 | 2019-06-28 01:25 | 2021-08-17 23:41 |
| GHSA-V33X-PRHC-GPH5 CVE-2019-11272 | Insufficiently Protected Credentials and Improper Authentication in Spring Security | 高危 | Mavenorg.springframework.security:spring-security-cas+1 | 已审查 | 2019-06-28 01:24 | 2021-06-10 04:12 |
| GHSA-Q4HG-RMQ2-52Q9 CVE-2019-10072 | Improper Locking in Apache Tomcat | 高危 | Mavenorg.apache.tomcat.embed:tomcat-embed-core | 已审查 | 2019-06-26 09:09 | 2024-03-11 23:39 |
| GHSA-P426-QW2P-V95V CVE-2017-15694 | Argument Injection in Apache Geode server | 中危 | Mavenorg.apache.geode:geode-core | 已审查 | 2019-06-26 09:09 | 2021-08-17 22:51 |
| GHSA-MF6X-7MM4-X2G7 CVE-2018-21270 | Out-of-bounds Read in stringstream | 中危 | npmstringstream | 已审查 | 2019-06-21 02:22 | 2021-03-20 04:59 |
| GHSA-4WM8-FJV7-J774 CVE-2019-8325 | RubyGems Escape sequence injection in errors | 高危 | RubyGemsrubygems-update | 已审查 | 2019-06-21 00:08 | 2023-08-28 21:17 |
| GHSA-5X32-C9MF-49CC CVE-2019-8320 | RubyGems Delete directory using symlink when decompressing tar | 高危 | RubyGemsrubygems-update | 已审查 | 2019-06-21 00:06 | 2023-08-28 21:16 |
| GHSA-76WM-422Q-92MQ CVE-2019-8324 | Code injection in RubyGems | 高危 | RubyGemsrubygems-update | 已审查 | 2019-06-21 00:06 | 2021-08-17 21:42 |
| GHSA-FR32-GR5C-XQ5C CVE-2019-8321 | RubyGems Escape sequence injection vulnerability in verbose | 高危 | RubyGemsrubygems-update | 已审查 | 2019-06-21 00:06 | 2023-08-28 21:19 |
| GHSA-MH37-8C3G-3FGC CVE-2019-8322 | RubyGems Escape sequence injection vulnerability in gem owner | 高危 | RubyGemsrubygems-update | 已审查 | 2019-06-21 00:06 | 2023-08-28 21:22 |
| GHSA-3H4R-PJV6-CPH9 CVE-2019-8323 | RubyGems Escape sequence injection vulnerability in api response handling | 高危 | RubyGemsrubygems-update | 已审查 | 2019-06-21 00:05 | 2023-08-28 21:23 |
| GHSA-28XH-WPGR-7FM8 | Command Injection in open | 严重 | npmopen | 已审查 | 2019-06-20 23:35 | 2020-09-01 02:31 |
| GHSA-X9P2-FXQ6-2M5F | Reverse Tabnapping in swagger-ui | 中危 | npmswagger-ui | 已审查 | 2019-06-20 22:33 | 2021-08-17 07:44 |
| GHSA-QX4V-6GC5-F2VV | Regular Expression Denial of Service | 中危 | npmesm | 已审查 | 2019-06-20 22:32 | 2021-02-26 01:20 |
| GHSA-4VR3-9V7H-5F8V | Low severity vulnerability that affects Gw2Sharp | 低危 | NuGetGw2Sharp | 已审查 | 2019-06-18 23:38 | 2021-12-03 22:36 |
| GHSA-68GR-CMCP-G3MJ | Directory Traversal in lactate | 高危 | npmlactate | 已审查 | 2019-06-15 00:39 | 2021-08-17 07:34 |
| GHSA-V2P6-4MP7-3R9V | Regular Expression Denial of Service in underscore.string | 中危 | npmunderscore.string | 已审查 | 2019-06-15 00:26 | 2020-09-01 02:34 |
| GHSA-4VMM-MHCQ-4X9J | Sandbox Bypass Leading to Arbitrary Code Execution in constantinople | 严重 | npmconstantinople | 已审查 | 2019-06-15 00:15 | 2021-08-17 00:06 |
| GHSA-4QHX-G9WP-G9M6 | Failure to sanitize quotes which can lead to sql injection in squel | 严重 | npmsquel | 已审查 | 2019-06-15 00:09 | 2021-09-17 05:00 |
| GHSA-68HW-VFH7-XVG8 CVE-2019-10157 | Forced Logout in keycloak-connect | 中危 | npmkeycloak-connect | 已审查 | 2019-06-14 04:38 | 2021-08-16 23:25 |
| GHSA-74CR-77XC-8G6R | Prototype Pollution in @apollo/gateway | 高危 | npm@apollo/gateway | 已审查 | 2019-06-14 04:37 | 2021-08-16 23:28 |
| GHSA-HWCX-9P4J-7HWJ CVE-2019-5442 | XML Entity Expansion in Pippo | 高危 | Mavenro.pippo:pippo-jaxb | 已审查 | 2019-06-14 04:22 | 2021-08-16 23:20 |