Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,796
Erlang
29
GitHub Actions
16
Go
1,713
Maven
4,948
npm
3,477
NuGet
605
pip
3,006
Pub
10
RubyGems
829
Rust
774
Swift
34
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

99,078 advisories

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been... Moderate Unreviewed
CVE-2024-5589 was published Jun 3, 2024
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been... Moderate Unreviewed
CVE-2024-5590 was published Jun 3, 2024
A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as... Moderate Unreviewed
CVE-2024-5588 was published Jun 2, 2024
MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross... Moderate Unreviewed
CVE-2024-36392 was published Jun 2, 2024
A vulnerability was found in Casdoor up to 1.335.0. It has been classified as problematic.... Moderate Unreviewed
CVE-2024-5587 was published Jun 2, 2024
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is... Moderate Unreviewed
CVE-2024-4344 was published Jun 2, 2024
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')... Moderate Unreviewed
CVE-2024-35646 was published Jun 2, 2024
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')... Moderate Unreviewed
CVE-2024-35647 was published Jun 2, 2024
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')... Moderate Unreviewed
CVE-2024-35645 was published Jun 2, 2024
The QQWorld Auto Save Images plugin for WordPress is vulnerable to unauthorized access of data... Moderate Unreviewed
CVE-2024-1324 was published Jun 1, 2024
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for... Moderate Unreviewed
CVE-2024-2506 was published Jun 1, 2024
The Contact Form Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... Moderate Unreviewed
CVE-2024-2295 was published Jun 1, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Uploadcare Uploadcare File Uploader and... Moderate Unreviewed
CVE-2024-35636 was published Jun 1, 2024
The Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder plugin for WordPress is... Moderate Unreviewed
CVE-2024-5501 was published Jun 1, 2024
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2024-4342 was published Jun 1, 2024
The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2024-3565 was published Jun 1, 2024
The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross... Moderate Unreviewed
CVE-2023-6382 was published Jun 1, 2024
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2024-4087 was published Jun 1, 2024
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross... Moderate Unreviewed
CVE-2024-4711 was published Jun 1, 2024
The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross... Moderate Unreviewed
CVE-2024-2933 was published Jun 1, 2024
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This... Moderate Unreviewed
CVE-2024-31907 was published May 31, 2024
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to stored cross-site scripting. This... Moderate Unreviewed
CVE-2024-31908 was published May 31, 2024
IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This... Moderate Unreviewed
CVE-2024-31889 was published May 31, 2024
The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side... Moderate Unreviewed
CVE-2023-7073 was published May 31, 2024
IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information... Moderate Unreviewed
CVE-2024-22338 was published May 31, 2024
ProTip! Advisories are also available from the GraphQL API