GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,474
Erlang
33
GitHub Actions
24
Go
2,203
Maven
5,000+
npm
3,845
NuGet
696
pip
3,635
Pub
12
RubyGems
911
Rust
912
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
10,372 advisories
Filter by severity
A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and...
Low
Unreviewed
CVE-2024-27803
was published
May 14, 2024
The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its...
Low
Unreviewed
CVE-2024-10560
was published
Mar 25, 2025
The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which...
Low
Unreviewed
CVE-2024-13123
was published
Mar 25, 2025
The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which...
Low
Unreviewed
CVE-2024-13122
was published
Mar 25, 2025
The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its...
Low
Unreviewed
CVE-2024-12769
was published
Mar 25, 2025
The Favorites WordPress plugin before 2.3.5 does not sanitise and escape some of its settings,...
Low
Unreviewed
CVE-2025-1452
was published
Mar 25, 2025
To exploit the vulnerability, it is necessary:
Low
Unreviewed
CVE-2025-0717
was published
Mar 25, 2025
The WordPress WP-Advanced-Search WordPress plugin before 3.3.9.3 does not sanitise and escape...
Low
Unreviewed
CVE-2024-10554
was published
Mar 25, 2025
IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This...
Low
Unreviewed
CVE-2019-4431
was published
May 24, 2022
Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I...
Low
Unreviewed
CVE-2023-40160
was published
Mar 18, 2024
The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its...
Low
Unreviewed
CVE-2024-10558
was published
Mar 24, 2025
The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of...
Low
Unreviewed
CVE-2024-13124
was published
Mar 24, 2025
The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise...
Low
Unreviewed
CVE-2025-1062
was published
Mar 24, 2025
The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise...
Low
Unreviewed
CVE-2025-1203
was published
Mar 24, 2025
A privacy issue was addressed by moving sensitive data to a protected location. This issue is...
Low
Unreviewed
CVE-2024-40838
was published
Sep 17, 2024
A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This...
Low
Unreviewed
CVE-2025-2584
was published
Mar 21, 2025
Insufficient verification of data authenticity in
the configuration state machine may allow a...
Low
Unreviewed
CVE-2023-20570
was published
Feb 13, 2024
The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file...
Low
Unreviewed
CVE-2025-1972
was published
Mar 22, 2025
A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability...
Low
Unreviewed
CVE-2025-1215
was published
Feb 12, 2025
An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chat_group...
Low
Unreviewed
CVE-2025-30345
was published
Mar 21, 2025
A directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to...
Low
Unreviewed
CVE-2025-30343
was published
Mar 21, 2025
Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in...
Low
Unreviewed
CVE-2025-2574
was published
Mar 20, 2025
The issue was addressed with improved restriction of data container access. This issue is fixed...
Low
Unreviewed
CVE-2023-42925
was published
Jul 29, 2024
A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2...
Low
Unreviewed
CVE-2025-2555
was published
Mar 20, 2025
The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An...
Low
Unreviewed
CVE-2024-44139
was published
Sep 17, 2024
ProTip!
Advisories are also available from the
GraphQL API