Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

242,580 advisories

Loading
Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are... Unknown Unreviewed
CVE-2024-52012 was published Jan 27, 2025
Core creation allows users to replace "trusted" configset files with arbitrary configuration ... Unknown Unreviewed
CVE-2025-24814 was published Jan 27, 2025
The Dyn Business Panel WordPress plugin through 1.0.0 does not have CSRF check in some places,... Unknown Unreviewed
CVE-2024-13057 was published Jan 27, 2025
An improper privilege management vulnerability in OTRS Generic Interface module allows change of... Low Unreviewed
CVE-2024-43446 was published Jan 27, 2025
The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before... Unknown Unreviewed
CVE-2024-12773 was published Jan 27, 2025
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places,... Unknown Unreviewed
CVE-2024-12436 was published Jan 27, 2025
Certain errors of the upstream libraries will insert sensitive information in the OTRS or ((OTRS)... Moderate Unreviewed
CVE-2025-24389 was published Jan 27, 2025
The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter... Unknown Unreviewed
CVE-2024-13056 was published Jan 27, 2025
The Social Share Buttons for WordPress plugin through 2.7 allows an unauthenticated user to... Unknown Unreviewed
CVE-2024-13117 was published Jan 27, 2025
The WC Affiliate WordPress plugin through 2.3.9 does not sanitise and escape a parameter before... Unknown Unreviewed
CVE-2024-12321 was published Jan 27, 2025
A vulnerability in OTRS Application Server and reverse proxy settings allows session hijacking... Moderate Unreviewed
CVE-2025-24390 was published Jan 27, 2025
The Crelly Slider WordPress plugin before 1.4.7 does not sanitise and escape some of its settings... Unknown Unreviewed
CVE-2024-13116 was published Jan 27, 2025
The Dental Optimizer Patient Generator App WordPress plugin through 1.0 does not sanitise and... Unknown Unreviewed
CVE-2024-13052 was published Jan 27, 2025
A vulnerability exists in OTRS and ((OTRS Community Edition)) that fail to set the HTTP response... Moderate Unreviewed
CVE-2024-43445 was published Jan 27, 2025
The Altra Side Menu WordPress plugin through 2.0 does not have CSRF checks in some places, which... Unknown Unreviewed
CVE-2024-12774 was published Jan 27, 2025
The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitise and escape a parameter... Unknown Unreviewed
CVE-2024-13094 was published Jan 27, 2025
The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitize and escape a parameter... Unknown Unreviewed
CVE-2024-13095 was published Jan 27, 2025
The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter... Unknown Unreviewed
CVE-2024-13055 was published Jan 27, 2025
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when... Unknown Unreviewed
CVE-2024-12280 was published Jan 27, 2025
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does... Moderate Unreviewed
CVE-2024-28770 was published Jan 27, 2025
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could... Low Unreviewed
CVE-2024-28766 was published Jan 27, 2025
IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does... Moderate Unreviewed
CVE-2024-28771 was published Jan 27, 2025
IBM InfoSphere Master Data Management 11.6, 12.0, and 14.0 is vulnerable to stored cross-site... Moderate Unreviewed
CVE-2023-46187 was published Jan 27, 2025
A vulnerability classified as problematic has been found in needyamin image_gallery 1.0. This... Moderate Unreviewed
CVE-2025-0721 was published Jan 27, 2025
A vulnerability classified as critical was found in needyamin image_gallery 1.0. This... Moderate Unreviewed
CVE-2025-0722 was published Jan 27, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database