GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,300
Erlang
31
GitHub Actions
21
Go
2,069
Maven
5,000+
npm
3,744
NuGet
668
pip
3,429
Pub
12
RubyGems
892
Rust
880
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
2,194 advisories
Filter by severity
The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin...
Moderate
Unreviewed
CVE-2024-12204
was published
Jan 11, 2025
Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This...
Moderate
Unreviewed
CVE-2024-13303
was published
Jan 9, 2025
Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This...
Moderate
Unreviewed
CVE-2024-13243
was published
Jan 9, 2025
The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3,...
Moderate
Unreviewed
CVE-2024-12606
was published
Jan 10, 2025
In Eclipse Dataspace Components versions 0.1.3 to 0.9.0, the Connector component filters which...
Moderate
Unreviewed
CVE-2024-9202
was published
Sep 27, 2024
Missing Authorization vulnerability in Jason Funk Title Experiments Free allows Exploiting...
Moderate
Unreviewed
CVE-2025-22561
was published
Jan 9, 2025
The Bitly's WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification...
Moderate
Unreviewed
CVE-2024-12616
was published
Jan 9, 2025
The GS Insever Portfolio plugin for WordPress is vulnerable to unauthorized modification of data...
Moderate
Unreviewed
CVE-2024-12249
was published
Jan 9, 2025
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-6155
was published
Jan 9, 2025
The Responsive FlipBook Plugin Wordpress plugin for WordPress is vulnerable to Stored Cross-Site...
Moderate
Unreviewed
CVE-2024-11929
was published
Jan 9, 2025
The Newsletter2Go plugin for WordPress is vulnerable to unauthorized modification of data due to...
Moderate
Unreviewed
CVE-2024-12618
was published
Jan 9, 2025
The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2024-5769
was published
Jan 9, 2025
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post...
Moderate
Unreviewed
CVE-2024-0516
was published
Feb 29, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5,...
Moderate
Unreviewed
CVE-2024-12431
was published
Jan 8, 2025
The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a...
Moderate
Unreviewed
CVE-2024-0385
was published
Mar 13, 2024
The Envo's Elementor Templates & Widgets for WooCommerce plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-0766
was published
Feb 28, 2024
The SportsPress – Sports Club & League Manager plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2024-1178
was published
Mar 5, 2024
The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-1285
was published
Mar 5, 2024
The Build & Control Block Patterns – Boost up Gutenberg Editor plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2024-1095
was published
Mar 5, 2024
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized...
Moderate
Unreviewed
CVE-2024-12712
was published
Jan 8, 2025
The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a...
Moderate
Unreviewed
CVE-2024-12855
was published
Jan 8, 2025
A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an...
Moderate
Unreviewed
CVE-2024-8001
was published
Nov 13, 2024
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-12713
was published
Jan 8, 2025
In telephony service, there is a possible missing permission check. This could lead to local...
Moderate
Unreviewed
CVE-2022-48444
was published
Jun 6, 2023
In telephony service, there is a possible missing permission check. This could lead to local...
Moderate
Unreviewed
CVE-2022-48445
was published
Jun 6, 2023
ProTip!
Advisories are also available from the
GraphQL API