Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,744
Maven
5,000+
npm
4,341
NuGet
765
pip
4,113
Pub
12
RubyGems
960
Rust
1,069
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

133,957 advisories

Loading
Cross-Site Request Forgery (CSRF) vulnerability in Burst Statistics B.V. Burst Statistics allows... Moderate Unreviewed
CVE-2025-53193 was published Jun 27, 2025
D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on... Moderate Unreviewed
CVE-2025-45729 was published Jun 27, 2025
Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR... Moderate Unreviewed
CVE-2025-40910 was published Jun 27, 2025
A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.... Moderate Unreviewed
CVE-2025-6767 was published Jun 27, 2025
A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8.... Moderate Unreviewed
CVE-2025-6766 was published Jun 27, 2025
A vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60... Moderate Unreviewed
CVE-2025-6765 was published Jun 27, 2025
A vulnerability classified as critical has been found in diyhi bbs up to 6.8. This affects the... Moderate Unreviewed
CVE-2025-6762 was published Jun 27, 2025
A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0. It has... Moderate Unreviewed
CVE-2025-6761 was published Jun 27, 2025
The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2025-5398 was published Jun 27, 2025
The Osom Blocks – Custom Post Type listing block plugin for WordPress is vulnerable to Stored... Moderate Unreviewed
CVE-2025-5940 was published Jun 27, 2025
The VR Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... Moderate Unreviewed
CVE-2025-5936 was published Jun 27, 2025
The A/B Testing for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2025-4587 was published Jun 27, 2025
The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2025-6550 was published Jun 27, 2025
The FL3R Accessibility Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2025-6689 was published Jun 27, 2025
The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block... Moderate Unreviewed
CVE-2025-5194 was published Jun 27, 2025
The BuddyPress Docs WordPress plugin before 2.2.5 lacks proper access controls and allows a... Moderate Unreviewed
CVE-2025-5526 was published Jun 27, 2025
The Firelight Lightbox WordPress plugin before 2.3.16 does not sanitise and escape title... Moderate Unreviewed
CVE-2025-5035 was published Jun 27, 2025
The Responsive Lightbox & Gallery WordPress plugin before 2.5.2 use the Swipebox library which... Moderate Unreviewed
CVE-2025-5093 was published Jun 27, 2025
A vulnerability was found in huija bicycleSharingServer 1.0 and classified as critical. This... Moderate Unreviewed
CVE-2025-6753 was published Jun 27, 2025
Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD... Moderate Unreviewed
CVE-2025-41418 was published Jun 27, 2025
An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows... Moderate Unreviewed
CVE-2025-45737 was published Jun 27, 2025
The isMobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’... Moderate Unreviewed
CVE-2025-6488 was published Jun 27, 2025
A vulnerability classified as critical was found in huija bicycleSharingServer up to... Moderate Unreviewed
CVE-2025-6749 was published Jun 27, 2025
Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper... Moderate Unreviewed
CVE-2025-47819 was published Jun 27, 2025
A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by... Moderate Unreviewed
CVE-2025-6750 was published Jun 27, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database