Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

7,160 advisories

Loading
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-47567 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-32307 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-32290 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-31926 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-32287 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-32301 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-32245 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-31928 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-32306 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-31641 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-31640 was published May 16, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-31637 was published May 16, 2025
The Taskbuilder WordPress plugin before 3.0.9 does not sanitize and escape a parameter before... High Unreviewed
CVE-2024-9831 was published May 15, 2025
The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter... High Unreviewed
CVE-2024-11267 was published May 15, 2025
The Connexion Logs WordPress plugin through 3.0.2 does not sanitize and escape a parameter before... High Unreviewed
CVE-2024-11372 was published May 15, 2025
The Advance Post Prefix WordPress plugin through 1.1.1 does not sanitize and escape a parameter... High Unreviewed
CVE-2024-12735 was published May 15, 2025
The AHAthat Plugin WordPress plugin through 1.6 does not sanitize and escape a parameter before... High Unreviewed
CVE-2024-11269 was published May 15, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2024-10864 was published May 14, 2025
Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated... High Unreviewed
CVE-2025-3833 was published May 14, 2025
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL... High Unreviewed
CVE-2025-3834 was published May 14, 2025
owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus... High Unreviewed
CVE-2025-28057 was published May 13, 2025
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All... High Unreviewed
CVE-2024-51444 was published May 13, 2025
The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection... High Unreviewed
CVE-2025-4396 was published May 13, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-47643 was published May 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... High Unreviewed
CVE-2025-47544 was published May 7, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database