检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-FJR2-R2MP-484P | Duplicate Advisory: SimpleSAMLphp signature validation bypass 已撤回 | 严重 | Packagistsimplesamlphp/simplesamlphp | 已审查 | 2024-05-29 03:29 | 2026-01-24 06:52 |
当前筛选结果 998 条 · 时间按北京时间显示
| GHSA-CG34-W3FM-82H3 |
Duplicate Advisory: Scrapy leaks the authorization header on same-domain but cross-origin redirects 已撤回 |
| 高危 |
PyPIscrapy |
| 已审查 |
| 2024-05-20 17:30 |
| 2024-05-21 04:17 |
| GHSA-CQH9-JFQR-H9JJ CVE-2024-4642 | Withdrawn Advisory: Weights and Biases (wandb) has a Server-Side Request Forgery (SSRF) vulnerability 已撤回 | 高危 | PyPIwandb | 已审查 | 2024-05-16 17:33 | 2024-05-21 04:20 |
| GHSA-R3W4-36X6-7R99 | Duplicate Advisory: Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459 已撤回 | 低危 | RubyGemsnokogiri | 已审查 | 2024-05-15 06:30 | 2024-05-17 01:53 |
| GHSA-QVWG-C35P-RQHJ | Duplicate Advisory: AVideo cross-site scripting vulnerability in the view/about.php page 已撤回 | 低危 | Packagistwwbn/avideo | 已审查 | 2024-05-15 02:30 | 2024-05-21 02:43 |
| GHSA-62QF-JCQ8-8GXW | Duplicate Advisory: sqlparse parsing heavily nested list leads to Denial of Service 已撤回 | 高危 | PyPIsqlparse | 已审查 | 2024-04-30 23:30 | 2024-05-01 19:08 |
| GHSA-C5PJ-MQFH-RVC3 | Withdrawn: Runc allows an arbitrary systemd property to be injected 已撤回 | 高危 | Gogithub.com/opencontainers/runc | 已审查 | 2024-04-26 14:30 | 2024-06-06 02:30 |
| GHSA-X5M7-63C6-FX79 CVE-2024-1139 | Withdrawn Advisory: Cluster Monitoring Operator contains a credentials leak 已撤回 | 高危 | Gogithub.com/openshift/cluster-monitoring-operator | 已审查 | 2024-04-26 02:30 | 2025-04-17 22:30 |
| GHSA-MW82-6M2G-QH6C | Duplicate Advisory: Sylius Cross Site Scripting (XSS) vulnerability 已撤回 | 中危 | Packagistsylius/sylius | 已审查 | 2024-04-23 05:31 | 2024-05-10 23:31 |
| GHSA-RMQV-7V3J-MR7P | Duplicate Advisory: Scrapy decompression bomb vulnerability 已撤回 | 高危 | PyPIscrapy | 已审查 | 2024-04-16 08:30 | 2024-04-16 22:04 |
| GHSA-4Q82-J5C2-G2C5 | Duplicate Advisory: Scrapy authorization header leakage on cross-domain redirect 已撤回 | 高危 | PyPIscrapy | 已审查 | 2024-04-16 08:30 | 2024-04-16 22:05 |
| GHSA-3F95-MXQ2-2F63 | Duplicate Advisory: Gradio Local File Inclusion vulnerability 已撤回 | 高危 | PyPIgradio | 已审查 | 2024-04-11 02:30 | 2026-02-04 01:39 |
| GHSA-CR6F-GF5W-VHRC | PyMongo Out-of-bounds Read in the bson module 已撤回 | 中危 | PyPIpymongo | 已审查 | 2024-04-06 14:31 | 2024-06-06 01:11 |
| GHSA-65PC-76PQ-PVF5 | Duplicate Advisory: Pebble service manager's file pull API allows access by any user 已撤回 | 中危 | Gogithub.com/canonical/pebble | 已审查 | 2024-04-04 23:30 | 2024-04-05 23:06 |
| GHSA-R65J-6H5F-4F92 CVE-2024-31033 | Withdrawn: JJWT improperly generates signing keys 已撤回 | 中危 | Mavenio.jsonwebtoken:jjwt-impl | 已审查 | 2024-04-01 11:30 | 2024-04-03 22:52 |
| GHSA-XCGP-R7R8-2HC9 CVE-2024-1540 | Gradio's CI vulnerable to Command Injection 已撤回 | 高危 | PyPIgradio | 已审查 | 2024-03-28 02:32 | 2024-04-16 23:50 |
| GHSA-MH7P-8M2F-QRM6 | Duplicate Advisory: Grafana vulnerable to authorization bypass 已撤回 | 中危 | Gogithub.com/grafana/grafana | 已审查 | 2024-03-27 02:32 | 2024-06-11 02:30 |
| GHSA-87QP-7CW8-8Q9C | Duplicate Advisory: web3-utils Prototype Pollution vulnerability 已撤回 | 高危 | npmweb3-utils | 已审查 | 2024-03-25 14:30 | 2024-03-28 05:57 |
| GHSA-3X9G-XFJ5-FQ84 | Duplicate Advisory: Cross-Site Request Forgery in Gradio 已撤回 | 中危 | PyPIgradio | 已审查 | 2024-03-22 05:31 | 2024-05-21 22:43 |
| GHSA-VCC3-RW6F-JV97 | Duplicate Advisory: Use-after-free in libxml2 via Nokogiri::XML::Reader 已撤回 | 中危 | RubyGemsnokogiri | 已审查 | 2024-03-19 04:38 | 2025-05-24 04:02 |
| GHSA-3XC6-7H59-J2X4 | Duplicate Advisory: eza Potential Heap Overflow Vulnerability for AArch64 已撤回 | 中危 | crates.ioeza | 已审查 | 2024-03-06 08:31 | 2024-03-06 23:34 |
| GHSA-JW44-4F3J-Q396 CVE-2019-25210 | Withdrawn Advisory: Helm shows secrets in clear text 已撤回 | 中危 | Gohelm.sh/helm/v3 | 已审查 | 2024-03-04 05:31 | 2025-06-19 22:29 |
| GHSA-JR22-8QGM-4Q87 | Duplicate Advisory: phpseclib does not properly limit the ASN1 OID length 已撤回 | 高危 | Packagistphpseclib/phpseclib | 已审查 | 2024-03-02 08:31 | 2026-05-09 02:24 |
| GHSA-HG35-MP25-QF6H | Duplicate Advisory: phpseclib: guardrails needed on isPrime and randomPrime 已撤回 | 高危 | Packagistphpseclib/phpseclib | 已审查 | 2024-03-02 08:31 | 2026-05-07 01:56 |
| GHSA-3HRR-XWVG-HXVR | Duplicate Advisory: Keycloak DoS via account lockout 已撤回 | 低危 | Mavenorg.keycloak:keycloak-core | 已审查 | 2024-02-29 11:33 | 2024-12-21 01:54 |