Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,342
Erlang
31
GitHub Actions
22
Go
2,106
Maven
5,000+
npm
3,764
NuGet
679
pip
3,451
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+

6,724 advisories

Loading
Cross-Site Request Forgery (CSRF) vulnerability in Schalk Burger Anonymize Links allows Stored... High Unreviewed
CVE-2025-23702 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Martijn Scheybeler Social Analytics allows... High Unreviewed
CVE-2025-23743 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Mahdi Khaksar mybb Last Topics allows Stored... High Unreviewed
CVE-2025-23749 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan Rename Author Slug allows Stored... High Unreviewed
CVE-2025-23640 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Ryan Sutana WP Panoramio allows Stored XSS... High Unreviewed
CVE-2025-23662 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Vinícius Krolow Twitter Post allows Stored XSS... High Unreviewed
CVE-2025-23654 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Kathleen Malone Find Your Reps allows Stored... High Unreviewed
CVE-2025-23557 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS... High Unreviewed
CVE-2025-23559 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Joshua Wieczorek Bible Embed allows Stored XSS... High Unreviewed
CVE-2025-23513 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in EdesaC Extra Options – Favicons allows Stored... High Unreviewed
CVE-2025-23508 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Intuitive Design GDReseller allows Stored XSS... High Unreviewed
CVE-2025-23567 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Syed Amir Hussain Custom Post allows Stored... High Unreviewed
CVE-2025-23566 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Sam Burdge WP Background Tile allows Stored... High Unreviewed
CVE-2025-23573 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Kelvin Ng Shortcode in Comment allows Stored... High Unreviewed
CVE-2025-23569 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Andrea Brandi Twitter Shortcode allows Stored... High Unreviewed
CVE-2025-23618 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Elke Hinze, Plumeria Web Design Web... High Unreviewed
CVE-2025-23560 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Kreg Steppe Auphonic Importer allows Stored... High Unreviewed
CVE-2025-23649 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in digfish Geotagged Media allows Stored XSS.This... High Unreviewed
CVE-2025-23558 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Hernan Javier Hegykozi MercadoLibre... High Unreviewed
CVE-2025-23659 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Sourov Amin Word Freshener allows Stored XSS... High Unreviewed
CVE-2025-23577 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal Floatbox Plus allows Stored XSS... High Unreviewed
CVE-2025-23617 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Oren hahiashvili add custom google tag manager... High Unreviewed
CVE-2025-23537 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Viktoria Rei Bauer WP-BlackCheck allows Stored... High Unreviewed
CVE-2025-23511 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Niklas Olsson Universal Analytics Injector... High Unreviewed
CVE-2025-23483 was published Jan 16, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Albdesign Simple Project Manager allows Stored... High Unreviewed
CVE-2025-23497 was published Jan 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database