Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,743
Erlang
35
GitHub Actions
29
Go
2,318
Maven
5,000+
npm
3,950
NuGet
711
pip
3,729
Pub
12
RubyGems
920
Rust
965
Swift
38
Unreviewed advisories
All unreviewed
5,000+

131,213 advisories

Loading
Sensitive information disclosure due to insecure folder permissions. The following products are... Moderate Unreviewed
CVE-2024-49385 was published Jan 2, 2025
Missing Authorization vulnerability in Putler / Storeapps Putler Connector for WooCommerce.This... Moderate Unreviewed
CVE-2023-40327 was published Jan 2, 2025
Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2023-45633 was published Jan 2, 2025
Missing Authorization vulnerability in Porto Theme Porto Theme - Functionality allows Exploiting... Moderate Unreviewed
CVE-2023-48739 was published Jan 2, 2025
Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control allows Exploiting... Moderate Unreviewed
CVE-2023-47778 was published Jan 2, 2025
Missing Authorization vulnerability in 10Web 10WebAnalytics allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2023-47807 was published Jan 2, 2025
Missing Authorization vulnerability in Xtemos WoodMart allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2023-32240 was published Jan 2, 2025
A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0.... Moderate Unreviewed
CVE-2025-0171 was published Jan 2, 2025
In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg... Moderate Unreviewed
CVE-2022-49035 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Creativthemes Point allows Cross Site Request... Moderate Unreviewed
CVE-2024-37931 was published Jan 2, 2025
A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology... Moderate Unreviewed
CVE-2024-13110 was published Jan 2, 2025
Missing Authorization vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to... Moderate Unreviewed
CVE-2022-43476 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash... Moderate Unreviewed
CVE-2024-37438 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Marsian i-amaze allows Cross Site Request... Moderate Unreviewed
CVE-2024-38731 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in BUDDYBOSS LLC BuddyBoss Theme allows Cross... Moderate Unreviewed
CVE-2024-37925 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager - Resume Manager... Moderate Unreviewed
CVE-2024-37241 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in VolThemes Patricia Blog allows Cross Site... Moderate Unreviewed
CVE-2024-38732 was published Jan 2, 2025
Missing Authorization vulnerability in Analytify.This issue affects Analytify: from n/a through 4... Moderate Unreviewed
CVE-2022-45830 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop Schema Lite allows Cross Site... Moderate Unreviewed
CVE-2024-37452 was published Jan 2, 2025
Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting... Moderate Unreviewed
CVE-2022-41995 was published Jan 2, 2025
A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan... Moderate Unreviewed
CVE-2024-13111 was published Jan 2, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2024-56257 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in FS-code FS Poster allows Cross Site Request... Moderate Unreviewed
CVE-2024-37237 was published Jan 2, 2025
A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination... Moderate Unreviewed
CVE-2024-13109 was published Jan 2, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search.This issue... Moderate Unreviewed
CVE-2024-38778 was published Jan 2, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database