Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,354
Erlang
31
GitHub Actions
22
Go
2,120
Maven
5,000+
npm
3,779
NuGet
681
pip
3,460
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,391 advisories

Loading
The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress plugin for... Moderate Unreviewed
CVE-2024-3268 was published May 21, 2024
The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization... Moderate Unreviewed
CVE-2020-36831 was published Oct 16, 2024
Missing Authorization vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue... Moderate Unreviewed
CVE-2024-30235 was published Mar 26, 2024
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized access of... Moderate Unreviewed
CVE-2024-1053 was published Feb 22, 2024
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted... Moderate Unreviewed
CVE-2021-26085 was published May 24, 2022
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... Moderate Unreviewed
CVE-2020-8196 was published May 24, 2022
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18,... Moderate Unreviewed
CVE-2020-8193 was published May 24, 2022
Missing Authorization vulnerability in Melodic Media Slide Banners allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-25120 was published Feb 7, 2025
Missing Authorization vulnerability in Metagauss Event Kikfyre allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-25110 was published Feb 7, 2025
Missing Authorization vulnerability in DeannaS Embed RSS allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2025-25081 was published Feb 7, 2025
In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a... Moderate Unreviewed
CVE-2023-20909 was published Apr 19, 2023
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to... Moderate Unreviewed
CVE-2024-3976 was published Feb 5, 2025
The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due... Moderate Unreviewed
CVE-2024-2844 was published Mar 29, 2024
Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This... Moderate Unreviewed
CVE-2023-52163 was published Feb 3, 2025
The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of... Moderate Unreviewed
CVE-2024-2538 was published Mar 20, 2024
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia... Moderate Unreviewed
CVE-2025-24096 was published Jan 28, 2025
The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due... Moderate Unreviewed
CVE-2024-2543 was published Apr 9, 2024
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email... Moderate Unreviewed
CVE-2024-3243 was published Apr 16, 2024
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2024-1044 was published Feb 29, 2024
Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce.This issue affects... Moderate Unreviewed
CVE-2023-51692 was published Feb 28, 2024
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for... Moderate Unreviewed
CVE-2024-11712 was published Dec 14, 2024
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of... Moderate Unreviewed
CVE-2024-3869 was published Apr 16, 2024
The TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet... Moderate Unreviewed
CVE-2024-1690 was published Mar 13, 2024
An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9... Moderate Unreviewed
CVE-2024-1539 was published Feb 5, 2025
The issue was addressed with improved access restrictions to the file system. This issue is fixed... Moderate Unreviewed
CVE-2025-24143 was published Jan 28, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database