Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+

2,612 advisories

Loading
Missing Authorization vulnerability in Sur.ly Sur.ly allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2025-23957 was published Jan 16, 2025
Missing Authorization vulnerability in xola.com Xola allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2025-23955 was published Jan 16, 2025
Missing Authorization vulnerability in WP Tasker WordPress Graphs & Charts allows Exploiting... Moderate Unreviewed
CVE-2025-23961 was published Jan 16, 2025
Missing Authorization vulnerability in Sven Hofmann & Michael Schoenrock Mark Posts allows... Moderate Unreviewed
CVE-2025-23963 was published Jan 16, 2025
Missing Authorization vulnerability in Goldstar Goldstar allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2025-23962 was published Jan 16, 2025
Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business... Moderate Unreviewed
CVE-2025-23917 was published Jan 16, 2025
Missing Authorization vulnerability in Nuanced Media WP Meetup allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-23916 was published Jan 16, 2025
Missing Authorization vulnerability in wishfulthemes Email Capture & Lead Generation allows... Moderate Unreviewed
CVE-2025-23929 was published Jan 16, 2025
Missing Authorization vulnerability in iTechArt-Group PayPal Marketing Solutions allows... Moderate Unreviewed
CVE-2025-23930 was published Jan 16, 2025
Missing Authorization vulnerability in SzMake Contact Form 7 Anti Spambot allows Exploiting... Moderate Unreviewed
CVE-2025-23862 was published Jan 16, 2025
Missing Authorization vulnerability in Ujjaval Jani Copy Move Posts allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-23764 was published Jan 16, 2025
Missing Authorization vulnerability in Alex Volkov Woo Tuner allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-23761 was published Jan 16, 2025
Missing Authorization vulnerability in Pravin Durugkar User Sync ActiveCampaign allows Exploiting... Moderate Unreviewed
CVE-2025-23778 was published Jan 16, 2025
Missing Authorization vulnerability in August Infotech AI Responsive Gallery Album allows... Moderate Unreviewed
CVE-2025-23785 was published Jan 16, 2025
Missing Authorization vulnerability in Thorn Technologies LLC Cache Sniper for Nginx allows... Moderate Unreviewed
CVE-2025-23776 was published Jan 16, 2025
Missing Authorization vulnerability in Sanjaysolutions Loginplus allows Accessing Functionality... Moderate Unreviewed
CVE-2025-23514 was published Jan 16, 2025
Missing Authorization vulnerability in Smackcoders SendGrid for WordPress allows Exploiting... Moderate Unreviewed
CVE-2025-23423 was published Jan 16, 2025
Indico Insecure Access Moderate
CVE-2024-50633 was published for indico (pip) Jan 16, 2025
The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to... Moderate Unreviewed
CVE-2024-12427 was published Jan 16, 2025
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1... Moderate Unreviewed
CVE-2024-54470 was published Jan 15, 2025
Missing Authorization vulnerability in Ugur CELIK WP News Sliders allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-22779 was published Jan 15, 2025
Missing Authorization vulnerability in bPlugins LLC Button Block allows Accessing Functionality... Moderate Unreviewed
CVE-2025-22787 was published Jan 15, 2025
Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2024-56295 was published Jan 15, 2025
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality... Moderate Unreviewed
CVE-2025-22737 was published Jan 15, 2025
Missing Authorization vulnerability in Infomaniak Staff VOD Infomaniak allows Exploiting... Moderate Unreviewed
CVE-2025-22729 was published Jan 15, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database