GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,344
Erlang
31
GitHub Actions
22
Go
2,112
Maven
5,000+
npm
3,767
NuGet
680
pip
3,453
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
2,083 advisories
Filter by severity
NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote...
High
Unreviewed
CVE-2025-25246
was published
Feb 5, 2025
The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2024-13472
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to create arbitrary files on affected...
High
Unreviewed
CVE-2024-23929
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
High
Unreviewed
CVE-2024-23920
was published
Jan 31, 2025
The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for...
High
Unreviewed
CVE-2024-11600
was published
Jan 30, 2025
The The Contact Form & SMTP Plugin for WordPress by PirateForms plugin for WordPress is...
High
Unreviewed
CVE-2024-13453
was published
Jan 30, 2025
A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers...
High
Unreviewed
CVE-2024-10001
was published
Jan 29, 2025
A Local Code Injection Vulnerability exists in the product and version listed above. The...
High
Unreviewed
CVE-2025-24482
was published
Jan 28, 2025
A validation issue was addressed with improved logic. This issue is fixed in iPadOS 17.7.4, macOS...
High
Unreviewed
CVE-2025-24159
was published
Jan 28, 2025
The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in...
High
Unreviewed
CVE-2024-13495
was published
Jan 22, 2025
The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in...
High
Unreviewed
CVE-2024-13499
was published
Jan 22, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7...
High
Unreviewed
CVE-2024-27856
was published
Jan 15, 2025
The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a...
High
Unreviewed
CVE-2024-50954
was published
Jan 15, 2025
ECOVACS Robotics Deebot T20 OMNI and T20e OMNI before 1.24.0 was discovered to contain a WiFi...
High
Unreviewed
CVE-2024-42911
was published
Jan 15, 2025
An authenticated parameter injection vulnerability exists in the web-based management interface...
High
Unreviewed
CVE-2025-23051
was published
Jan 14, 2025
Windows Search Service Elevation of Privilege Vulnerability
High
Unreviewed
CVE-2025-21292
was published
Jan 14, 2025
Microsoft Power Automate Remote Code Execution Vulnerability
High
Unreviewed
CVE-2025-21187
was published
Jan 14, 2025
A remote code execution (RCE) vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10...
High
Unreviewed
CVE-2024-53561
was published
Jan 14, 2025
The administrator is able to configure an insecure captive portal script
High
Unreviewed
CVE-2024-9132
was published
Jan 11, 2025
The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator...
High
Unreviewed
CVE-2024-12471
was published
Jan 7, 2025
The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2024-11733
was published
Jan 4, 2025
An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive...
High
Unreviewed
CVE-2024-50715
was published
Dec 27, 2024
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via...
High
Unreviewed
CVE-2024-54907
was published
Dec 26, 2024
The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable...
High
Unreviewed
CVE-2024-11977
was published
Dec 21, 2024
A post-auth SQLi vulnerability in the User Portal allows authenticated users to execute code...
High
Unreviewed
CVE-2024-12729
was published
Dec 19, 2024
ProTip!
Advisories are also available from the
GraphQL API