Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,779
Erlang
36
GitHub Actions
29
Go
2,338
Maven
5,000+
npm
3,972
NuGet
714
pip
3,769
Pub
12
RubyGems
923
Rust
976
Swift
38
Unreviewed advisories
All unreviewed
5,000+

663 advisories

Loading
A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is... Moderate Unreviewed
CVE-2025-3787 was published Apr 18, 2025
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ... Moderate Unreviewed
CVE-2017-3546 was published May 13, 2022
Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management... Moderate Unreviewed
CVE-2017-16678 was published May 14, 2022
WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a... Moderate Unreviewed
CVE-2022-3590 was published Dec 14, 2022
An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker... Moderate Unreviewed
CVE-2025-29456 was published Apr 18, 2025
An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker... Moderate Unreviewed
CVE-2025-29453 was published Apr 18, 2025
An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker... Moderate Unreviewed
CVE-2025-29455 was published Apr 17, 2025
An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker... Moderate Unreviewed
CVE-2025-29454 was published Apr 17, 2025
An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via... Moderate Unreviewed
CVE-2025-29450 was published Apr 17, 2025
An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via... Moderate Unreviewed
CVE-2025-29449 was published Apr 17, 2025
Crawl4AI SSRF vulnerability Moderate
CVE-2025-28197 was published for Crawl4AI (pip) Apr 18, 2025
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF).... Moderate Unreviewed
CVE-2025-27907 was published Apr 22, 2025
IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial... Moderate Unreviewed
CVE-2022-43880 was published Mar 3, 2024
Server-Side Request Forgery (SSRF) vulnerability in Adam Pery Animate allows Server Side Request... Moderate Unreviewed
CVE-2025-46443 was published Apr 24, 2025
Server-Side Request Forgery (SSRF) vulnerability in Ankur Vishwakarma WP AVCL Automation Helper ... Moderate Unreviewed
CVE-2025-46531 was published Apr 24, 2025
Server-Side Request Forgery (SSRF) vulnerability in Derek Springer BeerXML Shortcode allows... Moderate Unreviewed
CVE-2025-46511 was published Apr 24, 2025
Server-Side Request Forgery (SSRF) vulnerability in josheli Simple Google Photos Grid allows... Moderate Unreviewed
CVE-2025-46503 was published Apr 24, 2025
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution ... Moderate Unreviewed
CVE-2025-3775 was published Apr 25, 2025
A vulnerability was found in playeduxyz PlayEdu 开源培训系统 up to 1.8 and classified as problematic.... Moderate Unreviewed
CVE-2025-4012 was published Apr 28, 2025
A vulnerability, which was classified as problematic, has been found in ChurchCRM 5.16.0.... Moderate Unreviewed
CVE-2025-3954 was published Apr 27, 2025
DevExpress before 23.1.3 allows AsyncDownloader SSRF. Moderate Unreviewed
CVE-2023-35817 was published Apr 28, 2025
The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in... Moderate Unreviewed
CVE-2024-13845 was published May 1, 2025
IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF).... Moderate Unreviewed
CVE-2024-55910 was published May 2, 2025
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url... Moderate Unreviewed
CVE-2025-45250 was published May 6, 2025
Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra allows Server Side... Moderate Unreviewed
CVE-2025-47464 was published May 7, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database