GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,343
Erlang
31
GitHub Actions
22
Go
2,106
Maven
5,000+
npm
3,764
NuGet
679
pip
3,451
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
95,385 advisories
Filter by severity
IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when...
High
Unreviewed
CVE-2024-45650
was published
Jan 31, 2025
The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2024-13472
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24609
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi - SabLab Internal Link...
High
Unreviewed
CVE-2025-23989
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24718
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Mahbubur Rahman Post Meta allows Reflected XSS...
High
Unreviewed
CVE-2025-24549
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24710
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24563
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in jablonczay Scroll Styler. This issue affects...
High
Unreviewed
CVE-2025-23990
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24632
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24534
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24608
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24560
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Overt Software Solutions LTD EZPZ SAML SP...
High
Unreviewed
CVE-2025-24749
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24635
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24535
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24551
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24686
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-22564
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-23759
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-23596
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Bhaskar Dhote Post Carousel Slider allows...
High
Unreviewed
CVE-2025-23977
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-23671
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Pedro Marcelo Issuu Panel allows Stored XSS....
High
Unreviewed
CVE-2025-23976
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in James Andrews Full Circle allows Stored XSS....
High
Unreviewed
CVE-2025-23980
was published
Jan 31, 2025
ProTip!
Advisories are also available from the
GraphQL API