Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

238,508 advisories

Loading
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to... Critical Unreviewed
CVE-2024-52046 was published Dec 25, 2024
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Information Exposure in all... Moderate Unreviewed
CVE-2024-12335 was published Dec 25, 2024
The WooCommerce Point of Sale plugin for WordPress is vulnerable to privilege escalation in all... Critical Unreviewed
CVE-2024-11281 was published Dec 25, 2024
The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is... Moderate Unreviewed
CVE-2024-10862 was published Dec 25, 2024
The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its... Unknown Unreviewed
CVE-2024-10858 was published Dec 25, 2024
The WP Data Access – App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable... High Unreviewed
CVE-2024-12428 was published Dec 25, 2024
The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages... Moderate Unreviewed
CVE-2024-12636 was published Dec 25, 2024
The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is... Moderate Unreviewed
CVE-2024-12413 was published Dec 25, 2024
In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation. High Unreviewed
CVE-2024-1609 was published Dec 25, 2024
The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and... High Unreviewed
CVE-2024-12272 was published Dec 25, 2024
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form &... Moderate Unreviewed
CVE-2024-12190 was published Dec 25, 2024
The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin |... Moderate Unreviewed
CVE-2024-12032 was published Dec 25, 2024
A reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application... Moderate Unreviewed
CVE-2021-40959 was published Dec 21, 2024
Delinea Privilege Manager before 12.0.2 mishandles the security of the Windows agent. High Unreviewed
CVE-2024-52926 was published Nov 18, 2024
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).... High Unreviewed
CVE-2019-2483 was published Dec 24, 2024
In the Linux kernel, the following vulnerability has been resolved: media: zr364xx: fix memory... Moderate Unreviewed
CVE-2021-47344 was published May 21, 2024
Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. This... Unknown Unreviewed
CVE-2024-43441 was published Dec 24, 2024
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer... Moderate Unreviewed
CVE-2021-47353 was published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix... Moderate Unreviewed
CVE-2021-47345 was published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved: mm: krealloc: Fix MTE false... Moderate Unreviewed
CVE-2024-53097 was published Nov 26, 2024
In the Linux kernel, the following vulnerability has been resolved: sctp: break out if... Moderate Unreviewed
CVE-2021-47397 was published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race... Moderate Unreviewed
CVE-2024-53100 was published Nov 26, 2024
In the Linux kernel, the following vulnerability has been resolved: bpf: Check validity of link-... High Unreviewed
CVE-2024-53099 was published Nov 26, 2024
In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer... Moderate Unreviewed
CVE-2021-47399 was published May 21, 2024
In the Linux kernel, the following vulnerability has been resolved: usb: common: usb-conn-gpio:... Moderate Unreviewed
CVE-2021-47331 was published May 21, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database