GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,471
Erlang
33
GitHub Actions
24
Go
2,174
Maven
5,000+
npm
3,835
NuGet
696
pip
3,511
Pub
12
RubyGems
910
Rust
908
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
871 advisories
Filter by severity
Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Ohio Extra...
Moderate
Unreviewed
CVE-2025-26924
was published
Mar 16, 2025
The The Code Snippets CPT plugin for WordPress is vulnerable to arbitrary shortcode execution in...
Moderate
Unreviewed
CVE-2024-13895
was published
Mar 8, 2025
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported...
Moderate
Unreviewed
CVE-2024-50405
was published
Mar 7, 2025
The The Listingo theme for WordPress is vulnerable to arbitrary shortcode execution in all...
Moderate
Unreviewed
CVE-2024-13815
was published
Mar 5, 2025
An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary...
Moderate
Unreviewed
CVE-2025-26182
was published
Mar 4, 2025
The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution in all...
Moderate
Unreviewed
CVE-2024-13806
was published
Mar 1, 2025
A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated...
Moderate
Unreviewed
CVE-2019-8900
was published
Feb 22, 2025
There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the...
Moderate
Unreviewed
CVE-2025-25507
was published
Feb 21, 2025
The Head, Footer and Post Injections plugin for WordPress is vulnerable to PHP Code Injection in...
Moderate
Unreviewed
CVE-2024-13900
was published
Feb 21, 2025
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which...
Moderate
Unreviewed
CVE-2023-51324
was published
Feb 20, 2025
PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which...
Moderate
Unreviewed
CVE-2023-51331
was published
Feb 20, 2025
PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which...
Moderate
Unreviewed
CVE-2023-51320
was published
Feb 20, 2025
PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name,...
Moderate
Unreviewed
CVE-2023-51317
was published
Feb 20, 2025
Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote...
Moderate
Unreviewed
CVE-2025-27218
was published
Feb 20, 2025
The Uncode Core plugin for WordPress is vulnerable to arbitrary shortcode execution in all...
Moderate
Unreviewed
CVE-2024-13689
was published
Feb 18, 2025
Cross Site Scripting vulnerability in Zertificon Z1 SecureMail Z1 CertServer v.3.16.4-2516...
Moderate
Unreviewed
CVE-2024-51122
was published
Feb 13, 2025
The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-13814
was published
Feb 12, 2025
An issue in Team Amaze Amaze File Manager v.3.8.5 and fixed in v.3.10 allows a local attacker to...
Moderate
Unreviewed
CVE-2024-33469
was published
Feb 12, 2025
The WP ALL Export Pro plugin for WordPress is vulnerable to unauthorized modification of data...
Moderate
Unreviewed
CVE-2024-7425
was published
Feb 7, 2025
An issue in deep-diver LLM-As-Chatbot before commit 99c2c03 allows a remote attacker to execute...
Moderate
Unreviewed
CVE-2024-55241
was published
Feb 7, 2025
The The AI Infographic Maker plugin for WordPress is vulnerable to arbitrary shortcode execution...
Moderate
Unreviewed
CVE-2024-12415
was published
Jan 31, 2025
In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by...
Moderate
Unreviewed
CVE-2024-40673
was published
Jan 28, 2025
An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject...
Moderate
Unreviewed
CVE-2024-55504
was published
Jan 21, 2025
The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-10970
was published
Jan 16, 2025
SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted...
Moderate
Unreviewed
CVE-2025-0060
was published
Jan 14, 2025
ProTip!
Advisories are also available from the
GraphQL API