Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

14,947 advisories

Loading
A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input... Critical Unreviewed
CVE-2025-8536 was published Oct 24, 2025
The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all... Moderate Unreviewed
CVE-2025-10748 was published Oct 24, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-11253 was published Oct 24, 2025
The URL Shortener Plugin For WordPress plugin for WordPress is vulnerable to unauthorized access... Moderate Unreviewed
CVE-2025-10740 was published Oct 24, 2025
gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the... Moderate Unreviewed
CVE-2025-61464 was published Oct 23, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-62015 was published Oct 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-59557 was published Oct 22, 2025
A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on... Critical Unreviewed
CVE-2025-57870 was published Oct 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-49931 was published Oct 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Moderate Unreviewed
CVE-2025-49378 was published Oct 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Critical Unreviewed
CVE-2025-49915 was published Oct 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... Moderate Unreviewed
CVE-2025-48091 was published Oct 22, 2025
The Email Tracker – Email Log, Email Open Tracking, Email Analytics & Email Management for... Moderate Unreviewed
CVE-2025-10047 was published Oct 22, 2025
daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php. Moderate Unreviewed
CVE-2025-61194 was published Oct 21, 2025
Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via... Moderate Unreviewed
CVE-2025-56450 was published Oct 21, 2025
SQL injection vulnerability in the fields of warehouse document filtering form in SIMPLE.ERP... High Unreviewed
CVE-2025-9339 was published Oct 21, 2025
Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL... High Unreviewed
CVE-2025-9428 was published Oct 21, 2025
SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may... Moderate Unreviewed
CVE-2025-26392 was published Oct 21, 2025
There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via... Moderate Unreviewed
CVE-2025-60783 was published Oct 20, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-62658 was published Oct 20, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-47902 was published Oct 20, 2025
SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the... Critical Unreviewed
CVE-2025-61455 was published Oct 20, 2025
A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability... Critical Unreviewed
CVE-2025-41028 was published Oct 20, 2025
A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of... Moderate Unreviewed
CVE-2025-11944 was published Oct 19, 2025
The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to SQL... Moderate Unreviewed
CVE-2025-10187 was published Oct 18, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database