GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,343
Erlang
31
GitHub Actions
22
Go
2,107
Maven
5,000+
npm
3,764
NuGet
679
pip
3,452
Pub
12
RubyGems
892
Rust
886
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
243,250 advisories
Filter by severity
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix merge preference...
Unknown
Unreviewed
CVE-2025-21672
was published
Jan 31, 2025
The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2024-13472
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in jablonczay Scroll Styler. This issue affects...
High
Unreviewed
CVE-2025-23990
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi - SabLab Internal Link...
High
Unreviewed
CVE-2025-23989
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-23987
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24534
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24563
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24551
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24560
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24608
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24535
was published
Jan 31, 2025
Insertion of Sensitive Information Into Sent Data vulnerability in UkrSolution Barcode Generator...
Moderate
Unreviewed
CVE-2025-24597
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24635
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24686
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Mahbubur Rahman Post Meta allows Reflected XSS...
High
Unreviewed
CVE-2025-24549
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24609
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24632
was published
Jan 31, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Overt Software Solutions LTD EZPZ SAML SP...
High
Unreviewed
CVE-2025-24749
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24718
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-24710
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-22564
was published
Jan 31, 2025
Missing Authorization vulnerability in MagePeople Team Booking and Rental Manager allows...
Moderate
Unreviewed
CVE-2025-22720
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22757
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-23671
was published
Jan 31, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
High
Unreviewed
CVE-2025-23596
was published
Jan 31, 2025
ProTip!
Advisories are also available from the
GraphQL API