Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,067
Erlang
29
GitHub Actions
19
Go
1,891
Maven
5,000+
npm
3,624
NuGet
638
pip
3,235
Pub
10
RubyGems
857
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

540 advisories

Loading
The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege... High Unreviewed
CVE-2024-8428 was published Sep 6, 2024
A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5),... Critical Unreviewed
CVE-2024-45032 was published Sep 10, 2024
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer... Moderate Unreviewed
CVE-2023-44254 was published Sep 10, 2024
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its... High Unreviewed
CVE-2024-45786 was published Sep 11, 2024
On versions before 2.1.4, after a regular user successfully logs in, they can manually make a... Moderate Unreviewed
CVE-2024-34457 was published Jul 22, 2024
A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic.... Moderate Unreviewed
CVE-2024-7438 was published Aug 3, 2024
A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4.... Moderate Unreviewed
CVE-2024-7437 was published Aug 3, 2024
Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub... High Unreviewed
CVE-2024-3306 was published Sep 12, 2024
A bug in the 9p authentication implementation within lib9p allows an attacker with an existing... High Unreviewed
CVE-2024-8158 was published Aug 26, 2024
An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object... Moderate Unreviewed
CVE-2024-25270 was published Sep 12, 2024
The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all... Moderate Unreviewed
CVE-2022-3459 was published Sep 16, 2024
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7... Low Unreviewed
CVE-2024-6685 was published Sep 17, 2024
Sentry improperly authorizes deletion of user issue alert notifications Moderate
CVE-2024-45605 was published for sentry (pip) Sep 17, 2024
javeedsk8341
Sentry improperly authorizes muting of alert rules High
CVE-2024-45606 was published for sentry (pip) Sep 17, 2024
emanuelbeni
This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to... High Unreviewed
CVE-2024-8601 was published Sep 9, 2024
ProTip! Advisories are also available from the GraphQL API