Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,238
Erlang
31
GitHub Actions
21
Go
2,005
Maven
5,000+
npm
3,716
NuGet
661
pip
3,388
Pub
11
RubyGems
885
Rust
851
Swift
36
Unreviewed advisories
All unreviewed
5,000+

6,199 advisories

Loading
Cross-Site Request Forgery (CSRF) vulnerability in Syed Umair Hussain Shah World Prayer Time... High Unreviewed
CVE-2024-50534 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Garmur While Loading allows Stored XSS.This... High Unreviewed
CVE-2024-51635 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Z.com by GMO GMO Social Connection allows... High Unreviewed
CVE-2024-51636 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Eftakhairul Islam Sticky Social Bar allows... High Unreviewed
CVE-2024-51631 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Sam Hoe SH Slideshow allows Stored XSS.This... High Unreviewed
CVE-2024-51632 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in IvyCat Web Services Simple Page Specific... High Unreviewed
CVE-2024-51633 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Scott E. Royalty Admin SMS Alert allows Stored... High Unreviewed
CVE-2024-51637 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Webriti WordPress Themes & Plugins Shop... High Unreviewed
CVE-2024-51634 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Hints Naver Blog allows Stored XSS.This issue... High Unreviewed
CVE-2024-51639 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in webhostri Seo Free allows Stored XSS.This... High Unreviewed
CVE-2024-51642 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Sam Wilson Addressbook allows Stored XSS.This... High Unreviewed
CVE-2024-51644 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in jcmlmorav Advanced PDF Generator allows Stored... High Unreviewed
CVE-2024-51641 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Rajan Agaskar Amazon Associate Filter allows... High Unreviewed
CVE-2024-51643 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Sanjeev Mohindra Awesome Shortcodes For... High Unreviewed
CVE-2024-51638 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Patrick Lumumba Mobilize allows Stored XSS... High Unreviewed
CVE-2024-51649 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Themefuse ThemeFuse Maintenance Mode allows... High Unreviewed
CVE-2024-51645 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Matt Rude MDR Webmaster Tools allows Stored... High Unreviewed
CVE-2024-51640 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls... Moderate Unreviewed
CVE-2024-43338 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Suresh Kumar wp-login customizer allows Stored... High Unreviewed
CVE-2024-52424 was published Nov 18, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Skpstorm SK WP Settings Backup allows Object... High Unreviewed
CVE-2024-52415 was published Nov 17, 2024
The 404 Error Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... Moderate Unreviewed
CVE-2024-11118 was published Nov 16, 2024
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is... Moderate Unreviewed
CVE-2024-6628 was published Nov 16, 2024
A vulnerability in the REST API of Cisco Expressway Series and Cisco TelePresence VCS... High Unreviewed
CVE-2022-20853 was published Nov 15, 2024
CSRF leading to delete account in wallabag/wallabag Moderate
CVE-2023-0737 was published for wallabag/wallabag (Composer) Nov 15, 2024
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ... Moderate Unreviewed
CVE-2024-51156 was published Nov 15, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database