Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,638
Maven
5,000+
npm
4,264
NuGet
760
pip
4,060
Pub
12
RubyGems
956
Rust
1,056
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

1,377 advisories

Loading
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects... Critical Unreviewed
CVE-2024-30223 was published Mar 28, 2024
Deserialization of Untrusted Data vulnerability in Echo Plugins Knowledge Base for Documentation,... High Unreviewed
CVE-2024-24842 was published Mar 27, 2024
Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects... High Unreviewed
CVE-2023-27459 was published Mar 26, 2024
Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks... High Unreviewed
CVE-2024-24725 was published Mar 24, 2024
The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied... Critical Unreviewed
CVE-2024-2054 was published Mar 21, 2024
In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code... Critical Unreviewed
CVE-2024-1800 was published Mar 20, 2024
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack... High Unreviewed
CVE-2024-1801 was published Mar 20, 2024
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack... High Unreviewed
CVE-2024-1856 was published Mar 20, 2024
Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social... High Unreviewed
CVE-2024-2721 was published Mar 20, 2024
Deserialization of Untrusted Data vulnerability in Themefic Tourfic.This issue affects Tourfic:... High Unreviewed
CVE-2024-29136 was published Mar 19, 2024
CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code... High Unreviewed
CVE-2024-2229 was published Mar 18, 2024
The Social Media Share Buttons plugin for WordPress is vulnerable to PHP Object Injection in all... High Unreviewed
CVE-2024-1685 was published Mar 16, 2024
The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget... High Unreviewed
CVE-2024-2006 was published Mar 13, 2024
The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is... High Unreviewed
CVE-2024-1772 was published Mar 13, 2024
The Product Carousel Slider & Grid Ultimate for WooCommerce plugin for WordPress is vulnerable to... High Unreviewed
CVE-2024-1950 was published Mar 13, 2024
In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag... Moderate Unreviewed
CVE-2024-0047 was published Mar 11, 2024
nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be... Critical Unreviewed
CVE-2024-28211 was published Mar 7, 2024
nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute... Critical Unreviewed
CVE-2024-28212 was published Mar 7, 2024
The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all... High Unreviewed
CVE-2024-1731 was published Mar 5, 2024
The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP... High Unreviewed
CVE-2024-0825 was published Mar 5, 2024
An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop... Critical Unreviewed
CVE-2024-24302 was published Mar 3, 2024
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability.... High Unreviewed
CVE-2024-0692 was published Mar 1, 2024
The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is... High Unreviewed
CVE-2024-1859 was published Mar 1, 2024
An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute... Critical Unreviewed
CVE-2024-23052 was published Feb 29, 2024
A vulnerability, which was classified as critical, was found in TemmokuMVC up to 2.3. Affected is... Moderate Unreviewed
CVE-2024-1750 was published Feb 22, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database