Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,342
Erlang
31
GitHub Actions
22
Go
2,106
Maven
5,000+
npm
3,764
NuGet
679
pip
3,451
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+

6,715 advisories

Loading
Cross-Site Request Forgery (CSRF) vulnerability in Shabbos Commerce Shabbos and Yom Tov allows... High Unreviewed
CVE-2025-23694 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in ArtkanMedia Book a Place allows Stored XSS... High Unreviewed
CVE-2025-23690 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Iván R. Delgado Martínez WP Custom Google... High Unreviewed
CVE-2025-23698 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in CS : ABS-Hosting.nl / Walchum.net Free... High Unreviewed
CVE-2025-23703 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Mozilla Web Push allows Stored XSS.This issue... High Unreviewed
CVE-2025-23720 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in RaymondDesign Post & Page Notes allows Stored... High Unreviewed
CVE-2025-23715 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Artem Anikeev Hack me if you can allows Stored... High Unreviewed
CVE-2025-23713 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Dominic Fallows DF Draggable allows Stored XSS... High Unreviewed
CVE-2025-23708 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in DSmidgy HTTP to HTTPS link changer by Eyga.net... High Unreviewed
CVE-2025-23677 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Mayur Sojitra Flying Twitter Birds allows... High Unreviewed
CVE-2025-23710 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Kapost Kapost allows Stored XSS.This issue... High Unreviewed
CVE-2025-23712 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Tussendoor internet & marketing Call me Now... High Unreviewed
CVE-2025-23745 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in SandyIN Import Users to MailChimp allows... High Unreviewed
CVE-2025-23675 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Stanisław Skonieczny Secure CAPTCHA allows... High Unreviewed
CVE-2025-23693 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Don Kukral Email on Publish allows Stored XSS... High Unreviewed
CVE-2025-23673 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in ITMOOTI Theme My Ontraport Smartform allows... High Unreviewed
CVE-2025-23717 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Schalk Burger Anonymize Links allows Stored... High Unreviewed
CVE-2025-23702 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Martijn Scheybeler Social Analytics allows... High Unreviewed
CVE-2025-23743 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Mahdi Khaksar mybb Last Topics allows Stored... High Unreviewed
CVE-2025-23749 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan Rename Author Slug allows Stored... High Unreviewed
CVE-2025-23640 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Ryan Sutana WP Panoramio allows Stored XSS... High Unreviewed
CVE-2025-23662 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Vinícius Krolow Twitter Post allows Stored XSS... High Unreviewed
CVE-2025-23654 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Kathleen Malone Find Your Reps allows Stored... High Unreviewed
CVE-2025-23557 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS... High Unreviewed
CVE-2025-23559 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Joshua Wieczorek Bible Embed allows Stored XSS... High Unreviewed
CVE-2025-23513 was published Jan 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database