检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-7M8F-HGJQ-8GC9 CVE-2026-70646 | aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler | 高危 | PyPIaiosend | 已审查 | 2026-05-23 01:27 | 2026-08-06 22:38 |
| GHSA-Q8MJ-M7CP-5Q26 CVE-2026-8723 | qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set |
当前筛选结果 35,190 条 · 时间按北京时间显示
| 中危 |
npmqs |
| 已审查 |
| 2026-05-23 01:27 |
| 2026-05-23 01:27 |
| GHSA-QQQM-5547-774X CVE-2026-48777 | FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory | 严重 | Gogithub.com/gtsteffaniak/filebrowser/backend | 已审查 | 2026-05-23 01:26 | 2026-06-09 07:15 |
| GHSA-JWVV-QR7Q-CV8J CVE-2026-46670 | YesWiki: Unauthenticated SQL Injection | 严重 | Packagistyeswiki/yeswiki | 已审查 | 2026-05-22 23:39 | 2026-05-22 23:39 |
| GHSA-6GXQ-F64P-5W6F CVE-2026-47166 | ImageMagick: Heap Buffer Over-Read in distributed pixel cache server | 中危 | NuGetMagick.NET-Q16-AnyCPU+16 | 已审查 | 2026-05-22 21:14 | 2026-05-22 21:14 |
| GHSA-2RGJ-GX5X-F62W CVE-2026-47165 | ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model | 中危 | NuGetMagick.NET-Q16-AnyCPU+16 | 已审查 | 2026-05-22 21:14 | 2026-06-11 22:07 |
| GHSA-4G75-9R48-JF92 CVE-2026-46693 | ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking | 中危 | NuGetMagick.NET-Q16-AnyCPU+16 | 已审查 | 2026-05-22 21:11 | 2026-06-11 22:06 |
| GHSA-P93H-F2JC-477J CVE-2026-46692 | ImageMagick: Heap Buffer Over-Write in distributed pixel cache server | 中危 | NuGetMagick.NET-Q16-AnyCPU+16 | 已审查 | 2026-05-22 21:10 | 2026-05-22 21:10 |
| GHSA-XJ25-753J-WGP9 CVE-2026-8415 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:31 |
| GHSA-V7C7-658V-HH7V CVE-2026-8410 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:15 |
| GHSA-RV3Q-XMFW-MCJV CVE-2026-8412 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:17 |
| GHSA-QJ94-6RX6-27FR CVE-2026-8416 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id) | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:32 |
| GHSA-MPQ2-MV8P-9WM6 CVE-2026-8413 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:18 |
| GHSA-F73J-PM2C-RXVR CVE-2026-8245 | Concrete CMS is Vulnerable to Reflected XSS in Legacy Pagination | 中危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:11 |
| GHSA-98QF-JVWJ-2R5F CVE-2026-8414 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:17 |
| GHSA-97JW-GR4M-C5V8 CVE-2026-8432 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star() | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:36 |
| GHSA-8C7C-H7PX-267G CVE-2026-8337 | Concrete CMS is vulnerable to IDOR in surveys | 中危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:13 |
| GHSA-752X-23HP-JMV6 CVE-2026-8411 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:16 |
| GHSA-6QJH-P324-694F CVE-2026-8434 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple() | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:37 |
| GHSA-6FXM-R8P3-MX5C CVE-2026-8433 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan() | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:36 |
| GHSA-67HJ-8239-CMF5 CVE-2026-8427 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id) | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:36 |
| GHSA-56C9-XQ5G-XRF9 CVE-2026-8409 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:15 |
| GHSA-44Q4-354F-C826 CVE-2026-8435 | Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion() | 低危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:37 |
| GHSA-XPGC-7VC2-8725 CVE-2026-8237 | Concrete CMS is vulnerable to IDOR | 中危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:07 |
| GHSA-WMW3-3FV3-H54W CVE-2026-8327 | Concrete CMS has a session-hardening bypass and allows password change without reauthorization | 中危 | Packagistconcrete5/concrete5 | 已审查 | 2026-05-22 08:31 | 2026-06-25 05:10 |