GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,635
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
7,160 advisories
Filter by severity
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-47587
was published
May 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-47537
was published
May 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-47538
was published
May 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-47490
was published
May 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-47460
was published
May 7, 2025
The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the...
High
Unreviewed
CVE-2025-0853
was published
May 7, 2025
The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL...
High
Unreviewed
CVE-2025-2011
was published
May 6, 2025
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester...
High
Unreviewed
CVE-2025-45321
was published
May 5, 2025
The Ultimate Auction Pro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’...
High
Unreviewed
CVE-2025-4204
was published
May 2, 2025
The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is...
High
Unreviewed
CVE-2024-13322
was published
May 2, 2025
The Advance Seat Reservation Management for WooCommerce plugin for WordPress is vulnerable to SQL...
High
Unreviewed
CVE-2024-13344
was published
May 2, 2025
SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in ...
High
Unreviewed
CVE-2025-44193
was published
Apr 30, 2025
SourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in ...
High
Unreviewed
CVE-2025-44194
was published
Apr 30, 2025
A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of...
High
Unreviewed
CVE-2025-45020
was published
Apr 30, 2025
A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory...
High
Unreviewed
CVE-2025-45956
was published
Apr 29, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-39377
was published
Apr 24, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-3872
was published
Apr 24, 2025
PostHog Plugin Server SQL Injection Vulnerability
High
CVE-2025-1520
was published
for
@posthog/plugin-server
(npm)
Apr 23, 2025
org.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API
High
CVE-2025-32968
was published
for
org.xwiki.platform:xwiki-platform-oldcore
(Maven)
Apr 23, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-3767
was published
Apr 22, 2025
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
High
Unreviewed
CVE-2025-23176
was published
Apr 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-46242
was published
Apr 22, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-46252
was published
Apr 22, 2025
The JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is...
High
Unreviewed
CVE-2025-2010
was published
Apr 19, 2025
In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability....
High
Unreviewed
CVE-2025-29180
was published
Apr 17, 2025
ProTip!
Advisories are also available from the
GraphQL API