GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,820
Erlang
36
GitHub Actions
32
Go
2,412
Maven
5,000+
npm
4,050
NuGet
723
pip
3,844
Pub
12
RubyGems
933
Rust
1,004
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
219 advisories
Filter by severity
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive...
Moderate
Unreviewed
CVE-2025-8401
was published
Jul 31, 2025
A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0 and classified as critical....
Moderate
Unreviewed
CVE-2025-7938
was published
Jul 21, 2025
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...
Moderate
Unreviewed
CVE-2025-50073
was published
Jul 15, 2025
Secure-upload is a data submission service that validates single-use tokens when accepting...
Moderate
Unreviewed
CVE-2025-53709
was published
Jul 10, 2025
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...
Moderate
Unreviewed
CVE-2025-20264
was published
Jun 26, 2025
When a link can be opened in an external application, Firefox for Android will, by default,...
Moderate
Unreviewed
CVE-2025-6431
was published
Jun 26, 2025
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated...
Moderate
Unreviewed
CVE-2025-6329
was published
Jun 20, 2025
A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1...
Moderate
Unreviewed
CVE-2025-5182
was published
May 26, 2025
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access...
Moderate
Unreviewed
CVE-2025-3924
was published
May 7, 2025
Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and...
Moderate
Unreviewed
CVE-2023-42973
was published
Apr 11, 2025
A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege...
Moderate
Unreviewed
CVE-2025-28131
was published
Apr 1, 2025
Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows...
Moderate
Unreviewed
CVE-2025-2600
was published
Mar 26, 2025
A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to...
Moderate
Unreviewed
CVE-2024-13060
was published
Mar 20, 2025
An improper authorization vulnerability exists in lunary-ai/lunary version 1.5.5. The /users/me...
Moderate
Unreviewed
CVE-2024-10274
was published
Mar 20, 2025
The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2024-13552
was published
Mar 7, 2025
The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet...
Moderate
Unreviewed
CVE-2024-13724
was published
Mar 4, 2025
Information disclosure while deriving keys for a session for any Widevine use case.
Moderate
Unreviewed
CVE-2024-43051
was published
Mar 3, 2025
A vulnerability, which was classified as problematic, has been found in SourceCodester Best...
Moderate
Unreviewed
CVE-2025-1607
was published
Feb 24, 2025
The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet...
Moderate
Unreviewed
CVE-2024-13692
was published
Feb 14, 2025
The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation...
Moderate
Unreviewed
CVE-2024-13821
was published
Feb 12, 2025
A vulnerability was found in Shiprocket Module 3 on OpenCart. It has been rated as critical....
Moderate
Unreviewed
CVE-2025-0580
was published
Jan 20, 2025
The Download Manager plugin for WordPress is vulnerable to unauthorized download of password...
Moderate
Unreviewed
CVE-2024-11768
was published
Dec 19, 2024
A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This...
Moderate
Unreviewed
CVE-2024-12483
was published
Dec 12, 2024
Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization...
Moderate
Unreviewed
CVE-2024-43729
was published
Dec 11, 2024
Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization...
Moderate
Unreviewed
CVE-2024-43731
was published
Dec 11, 2024
ProTip!
Advisories are also available from the
GraphQL API