检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-GV85-XG33-553C | Duplicate Advisory: ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS 已撤回 | 中危 | NuGetMagick.NET-Q16-AnyCPU | 已审查 | 2023-03-24 05:30 | 2026-03-13 04:29 |
当前筛选结果 998 条 · 时间按北京时间显示
| GHSA-3CGW-HFW7-WC7J |
Duplicate Advisory: Grafana Stored Cross-site Scripting vulnerability 已撤回 |
| 中危 |
Gogithub.com/grafana/grafana |
| 已审查 |
| 2023-03-23 17:30 |
| 2025-02-14 02:41 |
| GHSA-XRQQ-WQH4-5HG2 CVE-2023-28426 | svg-sanitizer has Cross-site Scripting Bypass 已撤回 | 中危 | Packagistenshrined/svg-sanitize | 已审查 | 2023-03-21 04:44 | 2023-03-23 20:50 |
| GHSA-C737-JHWR-FQXJ | Duplicate Advisory: Cross Site Scripting in eZ Platform Ibexa Kernel 已撤回 | 中危 | Packagistezsystems/ezplatform-kernel+1 | 已审查 | 2023-03-12 14:30 | 2026-02-03 03:55 |
| GHSA-89P3-9J8C-FQH4 | Duplicate Advisory: User account enumeration in eZ Publish Ibexa Kernel 已撤回 | 中危 | Packagistezsystems/ezpublish-kernel | 已审查 | 2023-03-12 14:30 | 2026-02-04 01:38 |
| GHSA-8WG7-88CG-7P9J CVE-2023-1247 | Withdrawn Advisory: Pimcore vulnerable to Cross-site Scripting 已撤回 | 中危 | Packagistpimcore/pimcore | 已审查 | 2023-03-07 20:30 | 2023-03-30 23:07 |
| GHSA-XR9W-X6GW-C9MJ | Duplicate advisory: Deno vulnerable to Regular Expression Denial of Service 已撤回 | 高危 | crates.iodeno | 已审查 | 2023-02-25 14:30 | 2023-04-04 01:18 |
| GHSA-JRMH-V64J-MJM9 | Duplicate Advisory: Insecure Temporary File in RESTEasy 已撤回 | 中危 | Mavenorg.jboss.resteasy:resteasy-core+1 | 已审查 | 2023-02-18 08:31 | 2025-01-16 02:56 |
| GHSA-R3VQ-92C6-3MQF | Duplicate advisory: Sequelize - Unsafe fall-through in getWhereConditions 已撤回 | 高危 | npm@sequelize/core | 已审查 | 2023-02-16 23:30 | 2023-04-29 06:06 |
| GHSA-8MWQ-MJ73-QV68 | Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements 已撤回 | 严重 | npm@sequelize/core+1 | 已审查 | 2023-02-16 23:30 | 2023-02-25 02:48 |
| GHSA-6P89-3P7C-QRHV CVE-2022-48110 | Cross-site scripting in CKEditor5 已撤回 | 中危 | npmckeditor5 | 已审查 | 2023-02-14 05:31 | 2023-02-24 05:52 |
| GHSA-8X6C-CV3V-VP6G | Withdrawn: cacheable-request depends on http-cache-semantics, which is vulnerable to Regular Expression Denial of Service 已撤回 | 高危 | npmcacheable-request | 已审查 | 2023-02-11 08:13 | 2023-02-14 10:40 |
| GHSA-6PM2-J2V8-H3CJ CVE-2023-0669 | Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework 已撤回 | 高危 | RubyGemsmetasploit-framework | 已审查 | 2023-02-07 05:30 | 2025-07-30 19:45 |
| GHSA-XRW3-WQPH-3FXG | Withdrawn: wallabag subject to Improper Authorization via annotations 已撤回 | 中危 | Packagistwallabag/wallabag | 已审查 | 2023-02-01 20:32 | 2023-02-09 00:14 |
| GHSA-H45F-RJVW-2RV2 | Withdrawn: wallabag subject to Improper Authorization 已撤回 | 中危 | Packagistwallabag/wallabag | 已审查 | 2023-02-01 20:32 | 2023-02-09 04:54 |
| GHSA-PP4W-9X82-6R47 CVE-2023-24830 | Withdrawn Advisory: Apache IoTDB contains Improper Authentication 已撤回 | 高危 | Mavenorg.apache.iotdb:iotdb-parent | 已审查 | 2023-01-31 02:30 | 2023-10-13 00:27 |
| GHSA-RW83-V3PW-M362 | Withdrawn: safeurl-python contains Server-Side Request Forgery 已撤回 | 中危 | PyPIsafeurl-python | 已审查 | 2023-01-30 14:30 | 2023-02-08 07:25 |
| GHSA-33GV-RVGQ-GPXP CVE-2023-0493 | Withdrawn Advisory: HTML injections in BTCPayServer 已撤回 | 高危 | NuGetBTCPayServer.Client | 已审查 | 2023-01-27 08:30 | 2023-10-11 05:18 |
| GHSA-VHVQ-JH34-3FC8 | Duplicate Advisory: Keycloak allows impersonation and lockout due to email trust not being handled correctly 已撤回 | 中危 | Mavenorg.keycloak:keycloak-core | 已审查 | 2023-01-13 14:30 | 2023-07-19 02:16 |
| GHSA-798H-G4J5-5537 | Duplicate Advisory: PapaParse Inefficient Regular Expression Complexity vulnerability 已撤回 | 高危 | npmpapaparse | 已审查 | 2023-01-11 23:30 | 2025-06-16 22:03 |
| GHSA-9F2C-XXFM-32MJ | Duplicate of GHSA-4xh4-v2pq-jvhm 已撤回 | 低危 | Pubpersonnummer | 已审查 | 2023-01-11 14:30 | 2023-01-12 02:58 |
| GHSA-4R2F-6FM9-2QGH | Duplicate Advisory: Ecto lacks a protection mechanism 已撤回 | 严重 | Hexecto | 已审查 | 2023-01-10 14:30 | 2026-01-23 04:38 |
| GHSA-JPGG-CP2X-QRW3 | Duplicate Advisory: ecnepsnai/web vulnerable to Uncontrolled Resource Consumption 已撤回 | 严重 | Gogithub.com/ecnepsnai/web | 已审查 | 2022-12-28 08:30 | 2026-01-24 06:35 |
| GHSA-967G-CJX4-H7J6 | Duplicate Advisory: go-codec-dagpb vulnerable to panic when decoding invalid blocks 已撤回 | 高危 | Gogithub.com/ipld/go-codec-dagpb | 已审查 | 2022-12-28 08:30 | 2026-01-24 06:34 |
| GHSA-4348-X292-H437 | Duplicate Advisory: GoBase Race Condition vulnerability 已撤回 | 低危 | Gogithub.com/ntbosscher/gobase | 已审查 | 2022-12-28 08:30 | 2026-02-03 05:00 |