GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,056
Erlang
29
GitHub Actions
19
Go
1,889
Maven
5,000+
npm
3,613
NuGet
638
pip
3,210
Pub
10
RubyGems
854
Rust
817
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
84 advisories
Filter by severity
A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability...
Moderate
Unreviewed
CVE-2024-3431
was published
Apr 8, 2024
Deserialization of Untrusted Data vulnerability in VJInfotech WP Import Export Lite.This issue...
Moderate
Unreviewed
CVE-2024-31308
was published
Apr 7, 2024
Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart.This issue...
Moderate
Unreviewed
CVE-2024-30221
was published
Mar 28, 2024
A vulnerability classified as critical was found in van_der_Schaar LAB AutoPrognosis 0.1.21. This...
Moderate
Unreviewed
CVE-2024-1748
was published
Feb 22, 2024
A vulnerability, which was classified as critical, was found in TemmokuMVC up to 2.3. Affected is...
Moderate
Unreviewed
CVE-2024-1750
was published
Feb 22, 2024
Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects...
Moderate
Unreviewed
CVE-2023-46615
was published
Feb 12, 2024
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res...
Moderate
Unreviewed
CVE-2024-1432
was published
Feb 11, 2024
A vulnerability, which was classified as critical, has been found in PHPEMS up to 1.0. Affected...
Moderate
Unreviewed
CVE-2024-1353
was published
Feb 9, 2024
The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all...
Moderate
Unreviewed
CVE-2024-0668
was published
Feb 6, 2024
A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is...
Moderate
Unreviewed
CVE-2024-1198
was published
Feb 3, 2024
A vulnerability was found in StanfordVL GibsonEnv 0.3.1. It has been classified as critical....
Moderate
Unreviewed
CVE-2024-0959
was published
Jan 27, 2024
Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership...
Moderate
Unreviewed
CVE-2022-45083
was published
Jan 19, 2024
Deserialization of Untrusted Data vulnerability in Nextend Smart Slider 3.This issue affects...
Moderate
Unreviewed
CVE-2022-45845
was published
Jan 19, 2024
A vulnerability, which was classified as problematic, was found in DeepFaceLab pretrained DF.wf...
Moderate
Unreviewed
CVE-2024-0654
was published
Jan 18, 2024
A vulnerability, which was classified as critical, has been found in fhs-opensource iparking 1.5...
Moderate
Unreviewed
CVE-2024-0302
was published
Jan 8, 2024
Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue...
Moderate
Unreviewed
CVE-2023-36381
was published
Dec 28, 2023
Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager –...
Moderate
Unreviewed
CVE-2022-47599
was published
Dec 20, 2023
Deserialization of Untrusted Data vulnerability in weDevs Dokan – Best WooCommerce Multivendor...
Moderate
Unreviewed
CVE-2023-34382
was published
Dec 19, 2023
Deserialization of Untrusted Data vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for...
Moderate
Unreviewed
CVE-2023-46154
was published
Dec 19, 2023
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res...
Moderate
Unreviewed
CVE-2023-6656
was published
Dec 10, 2023
In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe...
Moderate
Unreviewed
CVE-2023-40121
was published
Oct 27, 2023
In spring AMQP versions 1.0.0 to
2.4.16 and 3.0.0 to 3.0.9 , allowed list patterns for...
Moderate
Unreviewed
CVE-2023-34050
was published
Oct 19, 2023
A vulnerability was found in spider-flow up to 0.5.0. It has been declared as critical. Affected...
Moderate
Unreviewed
CVE-2023-5016
was published
Sep 17, 2023
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue...
Moderate
Unreviewed
CVE-2023-32665
was published
Sep 14, 2023
IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1...
Moderate
Unreviewed
CVE-2023-24971
was published
Jul 31, 2023
ProTip!
Advisories are also available from the
GraphQL API