Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

301,518 advisories

Loading
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2025-62040 was published Nov 6, 2025
Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n... Moderate Unreviewed
CVE-2025-62018 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-62044 was published Nov 6, 2025
Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient:... Moderate Unreviewed
CVE-2025-62028 was published Nov 6, 2025
Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with... High Unreviewed
CVE-2025-62039 was published Nov 6, 2025
Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through ... Moderate Unreviewed
CVE-2025-62033 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2025-62031 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-62051 was published Nov 6, 2025
Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem... Moderate Unreviewed
CVE-2025-62046 was published Nov 6, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case... Critical Unreviewed
CVE-2025-62047 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2025-62059 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2025-62036 was published Nov 6, 2025
Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n... Moderate Unreviewed
CVE-2025-62017 was published Nov 6, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... High Unreviewed
CVE-2025-62045 was published Nov 6, 2025
Missing Authorization vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder... Moderate Unreviewed
CVE-2025-62049 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2025-62041 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-62032 was published Nov 6, 2025
Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through ... Moderate Unreviewed
CVE-2025-62037 was published Nov 6, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... High Unreviewed
CVE-2025-62055 was published Nov 6, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... High Unreviewed
CVE-2025-62053 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2025-62057 was published Nov 6, 2025
Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a... High Unreviewed
CVE-2025-62034 was published Nov 6, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in hogash Kallyas kallyas.This... Critical Unreviewed
CVE-2025-62016 was published Nov 6, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-62012 was published Nov 6, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... High Unreviewed
CVE-2025-62014 was published Nov 6, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database