Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,677
Erlang
34
GitHub Actions
26
Go
2,265
Maven
5,000+
npm
3,918
NuGet
705
pip
3,686
Pub
12
RubyGems
916
Rust
944
Swift
38
Unreviewed advisories
All unreviewed
5,000+

974 advisories

Loading
OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution. Moderate Unreviewed
CVE-2023-42404 was published Apr 28, 2025
Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET... Moderate Unreviewed
CVE-2024-32499 was published Apr 28, 2025
A vulnerability, which was classified as problematic, was found in nortikin Sverchok 1.3.0.... Moderate Unreviewed
CVE-2025-3982 was published Apr 27, 2025
The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in... Moderate Unreviewed
CVE-2024-13812 was published Apr 26, 2025
A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR... Moderate Unreviewed
CVE-2025-0618 was published Apr 23, 2025
The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all... Moderate Unreviewed
CVE-2025-3472 was published Apr 22, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in Fetch Designs Sign-up... Moderate Unreviewed
CVE-2025-26996 was published Apr 16, 2025
A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue... Moderate Unreviewed
CVE-2025-3563 was published Apr 14, 2025
The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for... Moderate Unreviewed
CVE-2025-3422 was published Apr 11, 2025
SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function... Moderate Unreviewed
CVE-2025-30013 was published Apr 8, 2025
InternLM LMDeploy code injection vulnerability Moderate
CVE-2025-3163 was published for lmdeploy (pip) Apr 3, 2025
A vulnerability was found in Tencent Music Entertainment SuperSonic up to 0.9.8. It has been... Moderate Unreviewed
CVE-2025-3164 was published Apr 3, 2025
The Shortcodes by United Themes plugin for WordPress is vulnerable to arbitrary shortcode... Moderate Unreviewed
CVE-2024-13557 was published Mar 29, 2025
An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8... Moderate Unreviewed
CVE-2025-2867 was published Mar 27, 2025
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary... Moderate Unreviewed
CVE-2024-41643 was published Mar 26, 2025
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to... Moderate Unreviewed
CVE-2025-29806 was published Mar 23, 2025
Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Ohio Extra... Moderate Unreviewed
CVE-2025-26924 was published Mar 16, 2025
nest allows a remote attacker to execute arbitrary code via the Content-Type header Moderate
CVE-2024-29409 was published for @nestjs/common (npm) Mar 14, 2025
aydinnyunus axi92
fperalta-INTIVE
Duplicate Advisory: Plenti - Code Injection - Denial of Services Moderate
GHSA-323w-6p85-26fr was published for github.com/plentico/plenti (Go) Mar 12, 2025 • withdrawn
The The Code Snippets CPT plugin for WordPress is vulnerable to arbitrary shortcode execution in... Moderate Unreviewed
CVE-2024-13895 was published Mar 8, 2025
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported... Moderate Unreviewed
CVE-2024-50405 was published Mar 7, 2025
The The Listingo theme for WordPress is vulnerable to arbitrary shortcode execution in all... Moderate Unreviewed
CVE-2024-13815 was published Mar 5, 2025
An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary... Moderate Unreviewed
CVE-2025-26182 was published Mar 4, 2025
PrismJS DOM Clobbering vulnerability Moderate
CVE-2024-53382 was published for prismjs (npm) Mar 3, 2025
lkuechler
Stage.js DOM Clobbering vulnerabilty Moderate
CVE-2024-53386 was published for stage-js (npm) Mar 3, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database