检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-8M2R-X2M2-3WMW | Duplicate Advisory: Pimcore Authenticated Stored Cross-Site Scripting (XSS) Via Search Document 已撤回 | 中危 | Packagistpimcore/pimcore | 已审查 | 2025-01-28 23:31 | 2025-11-05 03:43 |
当前筛选结果 998 条 · 时间按北京时间显示
Withdrawn Advisory: Umbraco Rich Text Display allows Cross-Site Scripting 已撤回 |
| 中危 |
NuGetUmbraco.Cms.Infrastructure |
| 已审查 |
| 2025-01-23 02:31 |
| 2025-02-14 00:44 |
| GHSA-M3HP-8546-5QMR | Duplicate Advisory: Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak 已撤回 | 中危 | Mavenorg.keycloak:keycloak-ldap-federation | 已审查 | 2025-01-22 23:32 | 2025-03-11 05:31 |
| GHSA-5WJW-H8X5-V65M | Duplicate Advisory: Wildfly HAL Console Cross-Site Scripting 已撤回 | 中危 | Mavenorg.jboss.hal:hal-console | 已审查 | 2025-01-15 02:32 | 2026-08-19 11:31 |
| GHSA-MFX6-JVW8-53FM | Duplicate Advisory: Stored XSS in REDAXO 已撤回 | 中危 | Packagistredaxo/redaxo | 已审查 | 2025-01-09 14:30 | 2025-02-11 02:45 |
| GHSA-J2V2-3784-VR44 | Duplicate Advisory: openCart Server-Side Template Injection (SSTI) vulnerability 已撤回 | 高危 | Packagistopencart/opencart | 已审查 | 2024-12-19 05:30 | 2025-01-24 07:32 |
| GHSA-6MPX-PMGP-WW49 | Duplicate Advisory: Keycloak vulnerable to Cleartext Transmission of Sensitive Information 已撤回 | 中危 | Mavenorg.keycloak:keycloak-quarkus-server | 已审查 | 2024-12-18 08:31 | 2025-02-06 05:16 |
| GHSA-GHW8-3XQW-HHCJ CVE-2024-12401 | Duplicate Advisory: cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs 已撤回 | 中危 | Gogithub.com/cert-manager/cert-manager | 已审查 | 2024-12-12 17:31 | 2024-12-13 03:19 |
| GHSA-22C5-CPVR-CFVQ CVE-2024-4109 | Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse 已撤回 | 高危 | Mavenio.undertow:undertow-core | 已审查 | 2024-12-12 17:31 | 2025-01-17 07:09 |
| GHSA-F626-677R-J5VQ CVE-2024-55586 | Withdrawn Advisory: Nette Database SQL injection 已撤回 | 中危 | Packagistnette/database | 已审查 | 2024-12-10 23:32 | 2024-12-20 03:52 |
| GHSA-4V5X-9M47-CQR2 | Duplicate Advisory: WildFly Elytron OpenID Connect Client Extension authorization code injection attack 已撤回 | 中危 | Mavenorg.wildfly:wildfly-elytron-oidc-client-subsystem | 已审查 | 2024-12-10 05:31 | 2026-01-29 10:38 |
| GHSA-Q4H9-7RXJ-7GX2 | Withdrawn Advisory: Netty vulnerability included in redis lettuce 已撤回 | 中危 | Mavenio.lettuce:lettuce-core | 已审查 | 2024-12-03 04:03 | 2025-01-16 22:36 |
| GHSA-J5G2-Q29X-CW3H | SimpleSAMLphp vulnerable to XXE in parsing SAML messages 已撤回 | 高危 | Packagistsimplesamlphp/simplesamlphp | 已审查 | 2024-12-03 04:00 | 2024-12-05 00:13 |
| GHSA-CG28-V4WQ-WHV5 CVE-2024-36610 | Withdrawn Advisory: Symfony's VarDumper vulnerable to unsafe deserialization 已撤回 | 高危 | Packagistsymfony/var-dumper | 已审查 | 2024-11-30 05:31 | 2024-12-04 05:36 |
| GHSA-7Q22-X757-CMGC CVE-2024-36611 | Withdrawn Advisory: Symfony http-security has authentication bypass 已撤回 | 中危 | Packagistsymfony/security-http | 已审查 | 2024-11-30 05:31 | 2024-12-04 05:36 |
| GHSA-PCX7-8HXG-J823 | Duplicate Advisory: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability 已撤回 | 中危 | Mavenorg.keycloak:keycloak-quarkus-server | 已审查 | 2024-11-25 17:30 | 2024-11-26 03:35 |
| GHSA-JCGG-MG9G-P9WF | Duplicate Advisory: Keycloak Build Process Exposes Sensitive Data 已撤回 | 中危 | Mavenorg.keycloak:keycloak-quarkus-server | 已审查 | 2024-11-25 17:30 | 2024-11-26 02:38 |
| GHSA-J3X3-R585-4QHG | Duplicate Advisory: org.keycloak:keycloak-services has Inefficient Regular Expression Complexity 已撤回 | 中危 | Mavenorg.keycloak:keycloak-services | 已审查 | 2024-11-25 17:30 | 2024-11-26 02:29 |
| GHSA-6VRW-MPJ8-3J59 | Duplicate Advisory: Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path 已撤回 | 低危 | Mavenorg.keycloak:keycloak-quarkus-server | 已审查 | 2024-11-25 17:30 | 2024-11-26 02:32 |
| GHSA-WPVF-5MC3-HV6M | Duplicate Advisory: Querydsl SQL/HQL injection 已撤回 | 严重 | Mavencom.querydsl:querydsl-apt+3 | 已审查 | 2024-11-21 05:30 | 2024-12-04 02:54 |
| GHSA-G5VP-J278-8PJH | Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability 已撤回 | 高危 | PyPItorchgeo | 已审查 | 2024-11-13 02:30 | 2026-04-01 08:03 |
| GHSA-WMM6-PGP8-29HG | Duplicate Advisory: .NET and Visual Studio Denial of Service Vulnerability 已撤回 | 高危 | NuGetSystem.Formats.Nrbf | 已审查 | 2024-11-13 02:30 | 2024-11-13 06:59 |
| GHSA-8RXM-6783-QH55 | Duplicate Advisory: .NET and Visual Studio Remote Code Execution Vulnerability 已撤回 | 严重 | NuGetSystem.Formats.Nrbf | 已审查 | 2024-11-13 02:30 | 2024-11-13 07:01 |
| GHSA-4GMQ-M9VP-JRWG | Duplicate Advisory: Umbraco CMS Cross-site Scripting vulnerability 已撤回 | 低危 | NuGetUmbraco.Cms.Core | 已审查 | 2024-11-04 14:30 | 2025-02-20 01:47 |
| GHSA-25PW-Q952-X37G | Duplicate Advisory: pyload-ng vulnerable to RCE with js2py sandbox escape 已撤回 | 高危 | PyPIpyload-ng | 已审查 | 2024-10-29 05:30 | 2024-10-29 05:50 |