检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-W7Q9-XR2X-WH7X CVE-2017-12097 | delayed_job_web Cross-site Scripting vulnerability | 中危 | RubyGemsdelayed_job_web | 已审查 | 2018-03-06 03:06 | 2023-08-29 19:24 |
| GHSA-6X77-RPQF-J6MW CVE-2017-1000189 | ejs vulnerable to DoS due to weak input validation |
当前筛选结果 366,391 条 · 时间按北京时间显示
| 高危 |
npmejs |
| 已审查 |
| 2018-03-06 02:54 |
| 2023-09-09 05:00 |
| GHSA-446M-MV8F-Q348 CVE-2017-18214 | Regular Expression Denial of Service in moment | 高危 | npmmoment | 已审查 | 2018-03-06 02:35 | 2021-09-01 05:44 |
| GHSA-WFWM-CHJ7-W59R CVE-2017-16229 | Ox gem stack overflow in sax_parse | 中危 | RubyGemsox | 已审查 | 2018-03-06 02:29 | 2023-08-29 22:59 |
| GHSA-H29F-7F56-J8WH CVE-2018-7212 | Sinatra Path Traversal vulnerability | 中危 | RubyGemssinatra | 已审查 | 2018-02-21 03:23 | 2023-01-24 05:16 |
| GHSA-832H-XG76-4GV6 CVE-2017-18077 | ReDoS in brace-expansion | 高危 | npmbrace-expansion | 已审查 | 2018-01-29 23:50 | 2021-09-04 06:10 |
| GHSA-9PR6-GRF4-X2FR CVE-2017-18076 | Omniauth allows POST parameters to be stored in session | 高危 | RubyGemsomniauth | 已审查 | 2018-01-29 23:45 | 2022-04-26 06:27 |
| GHSA-M34X-WGRH-G897 CVE-2018-6184 | Directory traversal vulnerability in Next.js | 高危 | npmnext | 已审查 | 2018-01-25 03:38 | 2022-04-29 04:13 |
| GHSA-94CQ-7CCQ-CMCM CVE-2014-5002 | lynx doesn't properly sanitize user input and exposes database password to unauthorized users | 高危 | RubyGemslynx | 已审查 | 2018-01-25 01:10 | 2023-01-24 04:52 |
| GHSA-W222-53C6-C86P CVE-2018-1000006 | Remote Code Execution in electron | 高危 | npmelectron | 已审查 | 2018-01-23 11:57 | 2021-06-11 03:55 |
| GHSA-RHGQ-VV9X-J4P5 CVE-2014-5000 | lawn-login exposes database password to unauthorized users | 高危 | RubyGemslawn-login | 已审查 | 2018-01-23 07:45 | 2023-08-01 04:48 |
| GHSA-6X45-86Q6-RCMR CVE-2014-4994 | Gyazo allows local users to write arbitrary files | 中危 | RubyGemsgyazo | 已审查 | 2018-01-23 07:17 | 2023-08-01 04:50 |
| GHSA-MHPP-875W-9CPV CVE-2016-10707 | Denial of Service in jquery | 高危 | Mavenjquery+3 | 已审查 | 2018-01-22 21:32 | 2025-09-03 06:35 |
| GHSA-RMXG-73GG-4P98 CVE-2015-9251 | Cross-Site Scripting (XSS) in jquery | 中危 | Mavenjquery+3 | 已审查 | 2018-01-22 21:32 | 2021-09-18 02:58 |
| GHSA-5JCF-C5RG-RMM8 CVE-2017-0889 | paperclip Server-Side Request Forgery vulnerability | 严重 | RubyGemspaperclip | 已审查 | 2018-01-22 21:31 | 2023-01-27 04:24 |
| GHSA-MVW8-V767-QHJM CVE-2018-5216 | Radiant CMS vulnerable to Cross-site Scripting | 中危 | RubyGemsradiant | 已审查 | 2018-01-06 09:11 | 2023-01-27 05:19 |
| GHSA-M7P8-9W66-9FRM CVE-2017-17718 | net-ldap Improper Certificate Validation vulnerability | 中危 | RubyGemsnet-ldap | 已审查 | 2018-01-06 09:11 | 2023-01-24 05:24 |
| GHSA-7PX7-7XJX-HXM8 CVE-2017-1000427 | Marked vulnerable to XSS from data URIs | 中危 | npmmarked | 已审查 | 2018-01-05 05:04 | 2023-09-08 06:53 |
| GHSA-CRMX-V835-HCP4 CVE-2017-17461 | Moderate severity vulnerability that affects marked 已撤回 | 中危 | npmmarked | 已审查 | 2018-01-05 05:04 | 2021-12-03 06:47 |
| GHSA-8JJF-W7J6-323C CVE-2017-1000452 | Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames | 高危 | npmsamlify | 已审查 | 2018-01-05 05:03 | 2023-08-19 05:00 |
| GHSA-PM9P-9926-W68M CVE-2016-10703 | Denial of Service in ecstatic | 高危 | npmecstatic | 已审查 | 2017-12-29 06:52 | 2021-09-17 02:15 |
| GHSA-H9MJ-FGHC-664W CVE-2017-10910 | Denial of Service in mqtt | 中危 | npmmqtt | 已审查 | 2017-12-29 06:51 | 2021-09-15 01:16 |
| GHSA-7FPW-CFC4-3P2C | Duplicate advisory: High severity vulnerability that affects passport-wsfed-saml2 已撤回 | 高危 | npmpassport-wsfed-saml2 | 已审查 | 2017-12-29 06:51 | 2023-06-22 06:00 |
| GHSA-GJ4P-3WH3-2RMF CVE-2017-17042 | Arbitrary file read vulnerability in yard server | 高危 | RubyGemsyard | 已审查 | 2017-12-21 08:47 | 2023-07-06 01:53 |
| GHSA-3RPR-MG43-XHQ4 CVE-2017-17068 | auth0-js Privilege Escalation Vulnerability | 高危 | npmauth0-js | 已审查 | 2017-12-21 08:47 | 2023-09-14 06:14 |