Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

131,336 advisories

Loading
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an... Moderate Unreviewed
CVE-2025-41102 was published Nov 11, 2025
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')... Moderate Unreviewed
CVE-2025-11960 was published Nov 11, 2025
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an... Moderate Unreviewed
CVE-2025-41101 was published Nov 11, 2025
The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2025-12787 was published Nov 11, 2025
The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2025-12788 was published Nov 11, 2025
The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for... Moderate Unreviewed
CVE-2025-12953 was published Nov 11, 2025
The VAPIX API port.cgi did not have sufficient input validation, which may result in process... Moderate Unreviewed
CVE-2025-9524 was published Nov 11, 2025
The ACAP Application framework could allow privilege escalation through a symlink attack. This... Moderate Unreviewed
CVE-2025-5718 was published Nov 11, 2025
An ACAP configuration file has improper permissions and lacks input validation, which could... Moderate Unreviewed
CVE-2025-8108 was published Nov 11, 2025
A malicious ACAP application can gain access to admin-level service account credentials used by... Moderate Unreviewed
CVE-2025-5452 was published Nov 11, 2025
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary... Moderate Unreviewed
CVE-2025-4645 was published Nov 11, 2025
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal... Moderate Unreviewed
CVE-2025-5454 was published Nov 11, 2025
The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator... Moderate Unreviewed
CVE-2025-9055 was published Nov 11, 2025
An ACAP configuration file has improper permissions, which could allow command injection and... Moderate Unreviewed
CVE-2025-6779 was published Nov 11, 2025
A 3rd-party component exposed its password in process arguments, allowing for low-privileged... Moderate Unreviewed
CVE-2025-6571 was published Nov 11, 2025
An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST)... Moderate Unreviewed
CVE-2025-5317 was published Nov 11, 2025
ACAP applications can gain elevated privileges due to improper input validation, potentially... Moderate Unreviewed
CVE-2025-6298 was published Nov 11, 2025
The USB Qr Code Scanner For Woocommerce plugin for WordPress is vulnerable to Cross-Site Request... Moderate Unreviewed
CVE-2025-12588 was published Nov 11, 2025
The RandomQuotr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin... Moderate Unreviewed
CVE-2025-12632 was published Nov 11, 2025
The YSlider plugin for WordPress is vulnerable to Cross-Site Request Forgery to Stored Cross-Site... Moderate Unreviewed
CVE-2025-12590 was published Nov 11, 2025
The Ninja Countdown | Fastest Countdown Builder plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-12665 was published Nov 11, 2025
The Coon Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... Moderate Unreviewed
CVE-2025-12662 was published Nov 11, 2025
The WP-Iconics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple... Moderate Unreviewed
CVE-2025-12671 was published Nov 11, 2025
The Flickr Show plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... Moderate Unreviewed
CVE-2025-12672 was published Nov 11, 2025
The Squirrels Auto Inventory plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2025-12631 was published Nov 11, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database