Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,266
Erlang
31
GitHub Actions
21
Go
2,041
Maven
5,000+
npm
3,733
NuGet
662
pip
3,414
Pub
12
RubyGems
891
Rust
866
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

93,716 advisories

Loading
Cross-Site Request Forgery (CSRF) vulnerability in Web solution soft Mandrill WP allows Stored... High Unreviewed
CVE-2024-54394 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Project Caruso Flaming Forms allows Stored XSS... High Unreviewed
CVE-2024-54398 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Turcu Ciprian Advanced Fancybox allows Stored... High Unreviewed
CVE-2024-54401 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in hosting.io, campaigns.io WP Controller allows... High Unreviewed
CVE-2024-54411 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC Comment Toolbar allows Stored... High Unreviewed
CVE-2024-54404 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in MELONIQ.NET AppMaps allows Stored XSS.This... High Unreviewed
CVE-2024-54400 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab CRUDLab Google Plus Button allows... High Unreviewed
CVE-2024-54399 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Andy Chapman ECT Social Share allows Stored... High Unreviewed
CVE-2024-54405 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Stefan Brandt Display Future Posts allows... High Unreviewed
CVE-2024-54413 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Toby Cox SOPA Blackout allows Stored XSS.This... High Unreviewed
CVE-2024-54410 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Cyle Conoly WP-HideThat allows Stored XSS.This... High Unreviewed
CVE-2024-54415 was published Dec 16, 2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2024-54403 was published Dec 16, 2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2024-54406 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in 随意的风 CK and SyntaxHighlighter allows Stored... High Unreviewed
CVE-2024-54407 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in fzmaster @ XPD XPD Reduce Image Filesize... High Unreviewed
CVE-2024-54409 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Ecommerce Templates ECT Product Carousel... High Unreviewed
CVE-2024-54412 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Navdeep Kumar Wp Login with Ajax allows Stored... High Unreviewed
CVE-2024-54416 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in geoWP Geoportail Shortcode allows Stored XSS... High Unreviewed
CVE-2024-54414 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Linda MacPhee-Cobb Category of Posts allows... High Unreviewed
CVE-2024-54427 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.com LionScripts: Site Maintenance ... High Unreviewed
CVE-2024-54425 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Ivan Ovsyannikov Aphorismus allows Stored XSS... High Unreviewed
CVE-2024-54429 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Sanjay Singh Negi Floating Video Player allows... High Unreviewed
CVE-2024-54421 was published Dec 16, 2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2024-54424 was published Dec 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Jesse Overright Social Media Sharing allows... High Unreviewed
CVE-2024-54423 was published Dec 16, 2024
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... High Unreviewed
CVE-2024-54422 was published Dec 16, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database