GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,778
Erlang
36
GitHub Actions
29
Go
2,336
Maven
5,000+
npm
3,971
NuGet
713
pip
3,769
Pub
12
RubyGems
923
Rust
976
Swift
38
Unreviewed advisories
All unreviewed
5,000+
2,533 advisories
Filter by severity
An authenticated parameter injection vulnerability exists in the web-based management interface...
High
Unreviewed
CVE-2025-23051
was published
Jan 14, 2025
ECOVACS Robotics Deebot T20 OMNI and T20e OMNI before 1.24.0 was discovered to contain a WiFi...
High
Unreviewed
CVE-2024-42911
was published
Jan 15, 2025
The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a...
High
Unreviewed
CVE-2024-50954
was published
Jan 15, 2025
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7...
High
Unreviewed
CVE-2024-27856
was published
Jan 15, 2025
Craft CMS has a potential RCE with a compromised security key
High
CVE-2025-23209
was published
for
craftcms/cms
(Composer)
Jan 21, 2025
In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing...
High
Unreviewed
CVE-2024-43771
was published
Jan 22, 2025
In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a...
High
Unreviewed
CVE-2024-43770
was published
Jan 22, 2025
The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in...
High
Unreviewed
CVE-2024-13495
was published
Jan 22, 2025
The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in...
High
Unreviewed
CVE-2024-13499
was published
Jan 22, 2025
A validation issue was addressed with improved logic. This issue is fixed in iPadOS 17.7.4, macOS...
High
Unreviewed
CVE-2025-24159
was published
Jan 28, 2025
A Local Code Injection Vulnerability exists in the product and version listed above. The...
High
Unreviewed
CVE-2025-24482
was published
Jan 28, 2025
A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers...
High
Unreviewed
CVE-2024-10001
was published
Jan 29, 2025
The The Contact Form & SMTP Plugin for WordPress by PirateForms plugin for WordPress is...
High
Unreviewed
CVE-2024-13453
was published
Jan 30, 2025
The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for...
High
Unreviewed
CVE-2024-11600
was published
Jan 30, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
High
Unreviewed
CVE-2024-23963
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
High
Unreviewed
CVE-2024-23920
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...
High
Unreviewed
CVE-2024-23921
was published
Jan 31, 2025
This vulnerability allows network-adjacent attackers to create arbitrary files on affected...
High
Unreviewed
CVE-2024-23929
was published
Jan 31, 2025
The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode...
High
Unreviewed
CVE-2024-13472
was published
Jan 31, 2025
NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote...
High
Unreviewed
CVE-2025-25246
was published
Feb 5, 2025
The The CURCY – Multi Currency for WooCommerce – The best free currency exchange plugin – Run...
High
Unreviewed
CVE-2024-13487
was published
Feb 6, 2025
An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive...
High
Unreviewed
CVE-2024-57609
was published
Feb 7, 2025
The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions...
High
Unreviewed
CVE-2024-7419
was published
Feb 7, 2025
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS...
High
Unreviewed
CVE-2024-27859
was published
Feb 10, 2025
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-13346
was published
Feb 13, 2025
ProTip!
Advisories are also available from the
GraphQL API