GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,819
Erlang
36
GitHub Actions
32
Go
2,410
Maven
5,000+
npm
4,046
NuGet
723
pip
3,842
Pub
12
RubyGems
933
Rust
1,003
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
470 advisories
Filter by severity
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive...
Moderate
Unreviewed
CVE-2025-8401
was published
Jul 31, 2025
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated,...
Moderate
Unreviewed
CVE-2023-20182
was published
May 18, 2023
A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0 and classified as critical....
Moderate
Unreviewed
CVE-2025-7938
was published
Jul 21, 2025
Improper authorization in Azure Machine Learning allows an authorized attacker to elevate...
Critical
Unreviewed
CVE-2025-49746
was published
Jul 18, 2025
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...
Moderate
Unreviewed
CVE-2025-50073
was published
Jul 15, 2025
The Application is vulnerable to an Unauthenticated Arbitrary File Read. This affects the
Agent...
High
Unreviewed
CVE-2024-26291
was published
Jul 14, 2025
Secure-upload is a data submission service that validates single-use tokens when accepting...
Moderate
Unreviewed
CVE-2025-53709
was published
Jul 10, 2025
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute...
High
Unreviewed
CVE-2025-49701
was published
Jul 8, 2025
An unauthorized user may leverage a specially crafted aggregation pipeline to access data without...
High
Unreviewed
CVE-2025-6713
was published
Jul 7, 2025
The Soumettre.fr plugin for WordPress is vulnerable to unauthorized access and modification of...
Low
Unreviewed
CVE-2025-4654
was published
Jul 2, 2025
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...
Moderate
Unreviewed
CVE-2025-20264
was published
Jun 26, 2025
When a link can be opened in an external application, Firefox for Android will, by default,...
Moderate
Unreviewed
CVE-2025-6431
was published
Jun 26, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app...
Moderate
Unreviewed
CVE-2023-40430
was published
Jan 11, 2024
A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated...
Moderate
Unreviewed
CVE-2025-6329
was published
Jun 20, 2025
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Authorization...
High
Unreviewed
CVE-2025-46840
was published
Jun 11, 2025
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with...
Moderate
Unreviewed
CVE-2023-43609
was published
Feb 9, 2024
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected...
High
Unreviewed
CVE-2025-43585
was published
Jun 10, 2025
Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a...
High
Unreviewed
CVE-2024-43706
was published
Jun 10, 2025
The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress...
Moderate
Unreviewed
CVE-2024-9531
was published
Oct 24, 2024
Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role...
Moderate
Unreviewed
CVE-2024-22021
was published
Feb 7, 2024
Improper Authorization in Azure Automation allows an authorized attacker to elevate privileges...
Critical
Unreviewed
CVE-2025-29827
was published
May 9, 2025
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). ...
Moderate
Unreviewed
CVE-2024-20979
was published
Jan 17, 2024
A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1...
Moderate
Unreviewed
CVE-2025-5182
was published
May 26, 2025
The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing...
Critical
Unreviewed
CVE-2025-4631
was published
May 31, 2025
The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to...
High
Unreviewed
CVE-2025-4672
was published
May 31, 2025
ProTip!
Advisories are also available from the
GraphQL API