Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,333
Erlang
31
GitHub Actions
22
Go
2,095
Maven
5,000+
npm
3,760
NuGet
678
pip
3,446
Pub
12
RubyGems
892
Rust
882
Swift
37
Unreviewed advisories
All unreviewed
5,000+

3,721 advisories

Loading
Missing Authorization vulnerability in Vikas Ratudi VForm allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-24604 was published Jan 24, 2025
Missing Authorization vulnerability in ElementInvader ElementInvader Addons for Elementor allows... Moderate Unreviewed
CVE-2025-24618 was published Jan 24, 2025
Missing Authorization vulnerability in Speedcomp Linet ERP-Woocommerce Integration allows... Moderate Unreviewed
CVE-2025-24594 was published Jan 24, 2025
Missing Authorization vulnerability in Epsiloncool WP Fast Total Search allows Exploiting... Moderate Unreviewed
CVE-2025-24571 was published Jan 24, 2025
Missing Authorization vulnerability in silverplugins217 Build Private Store For Woocommerce... Moderate Unreviewed
CVE-2025-24633 was published Jan 24, 2025
Missing Authorization vulnerability in Marco Almeida | Webdados Taxonomy/Term and Role based... Moderate Unreviewed
CVE-2025-24625 was published Jan 24, 2025
Missing Authorization vulnerability in theDotstore Product Size Charts Plugin for WooCommerce... Moderate Unreviewed
CVE-2025-23991 was published Jan 24, 2025
The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and... Moderate Unreviewed
CVE-2024-13698 was published Jan 24, 2025
The Spexo Addons for Elementor – Free Elementor Addons, Widgets and Templates plugin for... Moderate Unreviewed
CVE-2024-13335 was published Jan 24, 2025
The Tutor LMS plugin for WordPress is vulnerable to bypass to user registration in versions up to... Moderate Unreviewed
CVE-2024-10393 was published Jan 23, 2025
Missing permission checks in Jenkins Azure Service Fabric Plugin Moderate
CVE-2025-24403 was published for org.jenkins-ci.plugins:service-fabric (Maven) Jan 22, 2025
Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-23684 was published Jan 22, 2025
Missing Authorization vulnerability in NotFound Database Sync allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-23486 was published Jan 22, 2025
Missing Authorization vulnerability in Team118GROUP Team 118GROUP Agent allows Exploiting... High Unreviewed
CVE-2025-23512 was published Jan 22, 2025
The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized access of data due to a... Moderate Unreviewed
CVE-2024-13447 was published Jan 22, 2025
The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a... Moderate Unreviewed
CVE-2024-13361 was published Jan 22, 2025
The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification... Moderate Unreviewed
CVE-2024-12879 was published Jan 22, 2025
In multiple locations, there is a possible way to access media content belonging to another user... Moderate Unreviewed
CVE-2023-40108 was published Jan 22, 2025
In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant... High Unreviewed
CVE-2024-49732 was published Jan 22, 2025
In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper... Moderate Unreviewed
CVE-2025-24461 was published Jan 21, 2025
Missing Authorization vulnerability in Widget Options Team Widget Options allows Exploiting... Moderate Unreviewed
CVE-2025-22722 was published Jan 21, 2025
Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and... Moderate Unreviewed
CVE-2025-22721 was published Jan 21, 2025
Missing Authorization vulnerability in Realty Workstation Realty Workstation allows Accessing... High Unreviewed
CVE-2025-23477 was published Jan 21, 2025
Missing Authorization vulnerability in Eniture Technology Standard Box Sizes – for WooCommerce.... High Unreviewed
CVE-2025-22318 was published Jan 21, 2025
Missing Authorization vulnerability in Joe Dolson My Tickets allows Accessing Functionality Not... High Unreviewed
CVE-2025-22717 was published Jan 21, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database