Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,750
Erlang
35
GitHub Actions
29
Go
2,323
Maven
5,000+
npm
3,956
NuGet
712
pip
3,739
Pub
12
RubyGems
921
Rust
973
Swift
38
Unreviewed advisories
All unreviewed
5,000+

808 advisories

Loading
Infinite loop condition in Amazon.IonDotnet High
CVE-2025-3857 was published for Amazon.IonDotnet (NuGet) Apr 21, 2025
Deserialization of Untrusted Data vulnerability in bestwebsoft Rating by BestWebSoft allows... High Unreviewed
CVE-2025-39527 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in WP Speedo Team Members allows Object Injection... High Unreviewed
CVE-2025-32686 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in PickPlugins Question Answer allows Object... High Unreviewed
CVE-2025-32647 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in Stylemix uListing allows Object Injection.... High Unreviewed
CVE-2025-32662 was published Apr 17, 2025
Deserialization of Untrusted Data vulnerability in turitop TuriTop Booking System allows Object... High Unreviewed
CVE-2025-32571 was published Apr 17, 2025
Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is... High Unreviewed
CVE-2025-31932 was published Apr 11, 2025
Deserialization of Untrusted Data vulnerability in PickPlugins Job Board Manager allows Object... High Unreviewed
CVE-2025-32144 was published Apr 11, 2025
Deserialization of Untrusted Data vulnerability in PickPlugins Accordion allows Object Injection.... High Unreviewed
CVE-2025-32143 was published Apr 11, 2025
Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently allows Object... High Unreviewed
CVE-2025-32145 was published Apr 10, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of... High Unreviewed
CVE-2025-30285 was published Apr 8, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of... High Unreviewed
CVE-2025-30284 was published Apr 8, 2025
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to... High Unreviewed
CVE-2025-29793 was published Apr 8, 2025
The IntelliSpace portal application utilizes .NET Remoting for its functionality. The... High Unreviewed
CVE-2025-3425 was published Apr 7, 2025
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of... High Unreviewed
CVE-2025-31175 was published Apr 7, 2025
Deserialization of Untrusted Data vulnerability in PickPlugins Testimonial Slider allows Object... High Unreviewed
CVE-2025-30889 was published Apr 3, 2025
Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly allows Object... High Unreviewed
CVE-2025-30892 was published Apr 1, 2025
jooby-pac4j: deserialization of untrusted data High
CVE-2025-31129 was published for io.jooby:jooby-pac4j (Maven) Apr 1, 2025
cwm1123
Deserialization of Untrusted Data vulnerability in MDJM MDJM Event Management allows Object... High Unreviewed
CVE-2025-31074 was published Apr 1, 2025
Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted... High Unreviewed
CVE-2025-31103 was published Mar 31, 2025
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to... High Unreviewed
CVE-2025-2485 was published Mar 28, 2025
Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress allows Object... High Unreviewed
CVE-2025-30773 was published Mar 27, 2025
The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress... High Unreviewed
CVE-2025-1913 was published Mar 26, 2025
The WordPress Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions... High Unreviewed
CVE-2024-13889 was published Mar 26, 2025
The Export and Import Users and Customers plugin for WordPress is vulnerable to PHP Object... High Unreviewed
CVE-2025-1971 was published Mar 22, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database