GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,743
Erlang
35
GitHub Actions
29
Go
2,315
Maven
5,000+
npm
3,949
NuGet
711
pip
3,729
Pub
12
RubyGems
920
Rust
965
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
91 advisories
Filter by severity
A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0...
Low
Unreviewed
CVE-2024-54020
was published
May 28, 2025
Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse...
Low
Unreviewed
CVE-2025-48009
was published
May 21, 2025
A Broken Object Level Authorization vulnerability in the component /households/permissions of hay...
Low
Unreviewed
CVE-2024-55070
was published
Mar 27, 2025
Missing Authorization vulnerability in fatcatapps Quiz Cat allows Exploiting Incorrectly...
Low
Unreviewed
CVE-2025-30877
was published
Mar 27, 2025
The eDocument Cockpit (Inbound NF-e) in SAP Electronic Invoicing for Brazil allows an...
Low
Unreviewed
CVE-2025-27432
was published
Mar 11, 2025
SAP Just In Time(JIT) does not perform necessary authorization checks for an authenticated user,...
Low
Unreviewed
CVE-2025-26655
was published
Mar 11, 2025
In affected versions of Octopus Deploy it was possible to upload files to unexpected locations on...
Low
Unreviewed
CVE-2025-0526
was published
Feb 11, 2025
This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and...
Low
Unreviewed
CVE-2024-40839
was published
Jan 15, 2025
The Spacer plugin for WordPress is vulnerable to unauthorized access of data due to a missing...
Low
Unreviewed
CVE-2024-10527
was published
Jan 7, 2025
Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly...
Low
Unreviewed
CVE-2023-41695
was published
Dec 13, 2024
Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly...
Low
Unreviewed
CVE-2022-45819
was published
Dec 13, 2024
The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file...
Low
Unreviewed
CVE-2024-12300
was published
Dec 13, 2024
Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting...
Low
Unreviewed
CVE-2023-28168
was published
Dec 9, 2024
Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly...
Low
Unreviewed
CVE-2023-23825
was published
Dec 9, 2024
Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord,...
Low
Unreviewed
CVE-2023-24375
was published
Dec 9, 2024
Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting...
Low
Unreviewed
CVE-2023-23814
was published
Dec 9, 2024
In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible...
Low
Unreviewed
CVE-2024-54153
was published
Dec 4, 2024
In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project...
Low
Unreviewed
CVE-2024-54155
was published
Dec 4, 2024
Missing Authorization vulnerability in ThemeIsle Otter - Gutenberg Block allows Exploiting...
Low
Unreviewed
CVE-2024-51671
was published
Nov 19, 2024
Cash Operations does not perform necessary authorization check for an authenticated user,...
Low
Unreviewed
CVE-2024-47587
was published
Nov 12, 2024
The issue was addressed by restricting options offered on a locked device. This issue is fixed in...
Low
Unreviewed
CVE-2024-44265
was published
Oct 28, 2024
The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a...
Low
Unreviewed
CVE-2024-8350
was published
Sep 25, 2024
An authenticated attacker with high privilege can use functions of SLCM transactions to which...
Low
Unreviewed
CVE-2024-45284
was published
Sep 10, 2024
Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform...
Low
Unreviewed
CVE-2024-41728
was published
Sep 10, 2024
Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing...
Low
Unreviewed
CVE-2024-8042
was published
Sep 9, 2024
ProTip!
Advisories are also available from the
GraphQL API