GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,189
Erlang
31
GitHub Actions
19
Go
1,985
Maven
5,000+
npm
3,701
NuGet
657
pip
3,326
Pub
11
RubyGems
882
Rust
836
Swift
35
Unreviewed advisories
All unreviewed
5,000+
6,133 advisories
Filter by severity
Cross-Site Request Forgery (CSRF) vulnerability in Lars Schenk Responsive Flickr Gallery allows...
High
Unreviewed
CVE-2024-51630
was published
Nov 9, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Chaser324 Featured Posts Scroll allows Stored...
High
Unreviewed
CVE-2024-51647
was published
Nov 9, 2024
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...
Critical
Unreviewed
CVE-2024-50966
was published
Nov 8, 2024
An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't...
High
Unreviewed
CVE-2019-20460
was published
Nov 7, 2024
An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection.
High
Unreviewed
CVE-2020-11919
was published
Nov 7, 2024
Moodle has CSRF risk in Feedback non-respondents report
High
CVE-2024-43434
was published
for
moodle/moodle
(Composer)
Nov 7, 2024
The Featured Posts Scroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...
Moderate
Unreviewed
CVE-2024-10922
was published
Nov 7, 2024
Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform...
High
Unreviewed
CVE-2024-51381
was published
Nov 5, 2024
Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the...
High
Unreviewed
CVE-2024-51382
was published
Nov 5, 2024
The WooCommerce Report plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...
High
Unreviewed
CVE-2024-10711
was published
Nov 5, 2024
The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting...
Moderate
Unreviewed
CVE-2024-9689
was published
Nov 5, 2024
LocalAI Cross-site Scripting vulnerability
Low
CVE-2024-48057
was published
for
github.com/mudler/LocalAI
(Go)
Nov 5, 2024
A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 "/main/social/home.php,"...
Moderate
Unreviewed
CVE-2024-30617
was published
Nov 4, 2024
IBM CICS TX Standard 11.1 is vulnerable to cross-site request forgery which could allow an...
Moderate
Unreviewed
CVE-2024-41744
was published
Nov 1, 2024
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been...
Moderate
Unreviewed
CVE-2024-10605
was published
Nov 1, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Lukas Huser EKC Tournament Manager allows...
Critical
Unreviewed
CVE-2024-49674
was published
Oct 31, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets...
Moderate
Unreviewed
CVE-2024-49685
was published
Oct 31, 2024
Cross-Site Request Forgery (CSRF) vulnerability in WPMobile.App allows Stored XSS.This issue...
Moderate
Unreviewed
CVE-2024-43933
was published
Oct 31, 2024
Cross-Site Request Forgery (CSRF) vulnerability in eyecix JobSearch allows Cross Site Request...
Moderate
Unreviewed
CVE-2024-43930
was published
Oct 31, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher allows Code...
Critical
Unreviewed
CVE-2024-43984
was published
Oct 31, 2024
The WPGlobus Translate Options plugin for WordPress is vulnerable to Cross-Site Request Forgery...
Moderate
Unreviewed
CVE-2024-9434
was published
Oct 31, 2024
Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit album...
High
Unreviewed
CVE-2024-48311
was published
Oct 31, 2024
A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified...
Moderate
Unreviewed
CVE-2024-10557
was published
Oct 31, 2024
A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of...
High
Unreviewed
CVE-2024-24777
was published
Oct 30, 2024
Cross-Site Request Forgery (CSRF) vulnerability in DarkMySite DarkMySite – Advanced Dark Mode...
Moderate
Unreviewed
CVE-2024-50466
was published
Oct 29, 2024
ProTip!
Advisories are also available from the
GraphQL API