检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-M5VH-3FW5-5WGH CVE-2026-40860 | Apache camel-jms, camel-sjms, camel-sjms2 and camel-amqp: Unsafe Deserialization of JMS ObjectMessage | 严重 | Mavenorg.apache.camel:camel-activemq+5 | 已审查 | 2026-04-27 17:34 | 2026-08-26 23:19 |
| GHSA-JG2M-9X48-3GVJ |
当前筛选结果 35,190 条 · 时间按北京时间显示
Apache Camel has an incomplete fix for CVE-2025-27636 |
| 严重 |
Mavenorg.apache.camel:camel-coap+3 |
| 已审查 |
| 2026-04-27 17:34 |
| 2026-05-22 21:10 |
| GHSA-8297-V2RF-2P32 CVE-2026-41635 | Apache MINA vulnerable to Deserialization of Untrusted Data | 严重 | Mavenorg.apache.mina:mina-core | 已审查 | 2026-04-27 17:34 | 2026-05-07 13:27 |
| GHSA-V3VG-332R-MW99 CVE-2026-40048 | Camel-PQC Vulnerable to Deserialization of Untrusted Data | 高危 | Mavenorg.apache.camel:camel-pqc | 已审查 | 2026-04-27 17:34 | 2026-05-06 05:18 |
| GHSA-6RMM-PG23-5F8Q CVE-2026-7045 | Dynamic-Datasource has an Injection vulnerability | 中危 | Mavencom.baomidou:dynamic-datasource-spring | 已审查 | 2026-04-27 08:30 | 2026-05-06 05:13 |
| GHSA-X99G-8V8J-25J2 CVE-2026-7020 | Ollama is Vulnerable to Path Traversal | 低危 | Gogithub.com/ollama/ollama | 已审查 | 2026-04-26 14:31 | 2026-05-06 04:33 |
| GHSA-7JM2-G593-4QRC | OpenClaw: Agent gateway config mutations could change protected operator settings | 中危 | npmopenclaw | 已审查 | 2026-04-26 07:51 | 2026-04-26 07:51 |
| GHSA-QRP5-GFW2-GXV4 | OpenClaw: Bundled MCP/LSP tools could bypass configured tool policy | 中危 | npmopenclaw | 已审查 | 2026-04-26 07:50 | 2026-04-26 07:50 |
| GHSA-H2VW-PH2C-JVWF CVE-2026-44992 | OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests | 中危 | npmopenclaw | 已审查 | 2026-04-26 07:50 | 2026-05-19 23:56 |
| GHSA-J4C5-89F5-F3PM | OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks | 低危 | npmopenclaw | 已审查 | 2026-04-26 07:49 | 2026-04-26 07:49 |
| GHSA-XRQ9-JM7V-G9H7 | OpenClaw: Paired-device pairing actions were not limited to the caller device | 低危 | npmopenclaw | 已审查 | 2026-04-26 07:49 | 2026-04-26 07:49 |
| GHSA-C4QG-J8JG-42Q5 CVE-2026-44117 | OpenClaw: QQBot direct media upload skipped URL SSRF validation | 中危 | npmopenclaw | 已审查 | 2026-04-26 07:48 | 2026-05-12 21:37 |
| GHSA-MJ59-H3Q9-GHFH CVE-2026-44995 | OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config | 中危 | npmopenclaw | 已审查 | 2026-04-26 07:48 | 2026-05-19 23:56 |
| GHSA-57R2-H2WJ-G887 CVE-2026-44999 | OpenClaw: Isolated cron awareness events were recorded as trusted system events | 低危 | npmopenclaw | 已审查 | 2026-04-26 07:47 | 2026-05-19 23:56 |
| GHSA-HXVM-XJVF-93F3 CVE-2026-44114 | OpenClaw: Workspace dotenv could override runtime-control environment variables | 高危 | npmopenclaw | 已审查 | 2026-04-26 07:47 | 2026-05-12 21:36 |
| GHSA-72Q8-JCMC-97WX | OpenClaw: Feishu card actions could misclassify DMs and skip dmPolicy | 中危 | npmopenclaw | 已审查 | 2026-04-26 07:46 | 2026-04-26 07:46 |
| GHSA-V8QF-FR4G-28P2 CVE-2026-41908 | OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization | 低危 | npmopenclaw | 已审查 | 2026-04-26 07:45 | 2026-05-05 05:05 |
| GHSA-2XCP-X87W-Q377 CVE-2026-45002 | OpenClaw: Hook mapping templates could bypass hook session-key opt-in | 中危 | npmopenclaw | 已审查 | 2026-04-26 07:45 | 2026-05-19 23:56 |
| GHSA-RPM5-65CW-6HJ4 CVE-2026-42215 | GitPython has Command Injection via Git options bypass | 高危 | PyPIGitPython | 已审查 | 2026-04-26 07:42 | 2026-05-09 05:52 |
| GHSA-X2QX-6953-8485 CVE-2026-42284 | GitPython: Unsafe option check validates multi_options before shlex.split transformation | 高危 | PyPIGitPython | 已审查 | 2026-04-26 07:41 | 2026-05-13 21:37 |
| GHSA-3GR9-485J-V4XF CVE-2026-41572 | Note Mark: Unauthenticated read of notes and assets in soft-deleted public books | 中危 | Gogithub.com/enchant97/note-mark/backend | 已审查 | 2026-04-26 07:40 | 2026-05-08 04:20 |
| GHSA-PXF8-6WQM-R6HH CVE-2026-41571 | Note Mark: OIDC-registered users authenticated by submitting password "null" | 严重 | Gogithub.com/enchant97/note-mark/backend | 已审查 | 2026-04-26 07:40 | 2026-05-08 04:20 |
| GHSA-GJ49-89WH-H4GJ CVE-2026-41520 | Cillium exposes sensitive information included in the cilium-bugtool debug archive | 高危 | Gogithub.com/cilium/cilium | 已审查 | 2026-04-26 07:39 | 2026-05-13 21:37 |
| GHSA-WG4G-395P-MQV3 CVE-2026-42282 | n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode | 中危 | npmn8n-mcp | 已审查 | 2026-04-26 07:35 | 2026-05-13 21:34 |
| GHSA-74M3-9QVM-RP9H CVE-2026-42275 | zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write | 高危 | Gogithub.com/openziti/zrok+1 | 已审查 | 2026-04-26 07:34 | 2026-05-12 21:29 |