Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,737
Maven
5,000+
npm
4,337
NuGet
764
pip
4,112
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+

144,825 advisories

Loading
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-58017 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-58021 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-58027 was published Sep 22, 2025
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in... Moderate Unreviewed
CVE-2025-57937 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-58031 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57950 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57952 was published Sep 22, 2025
Missing Authorization vulnerability in MantraBrain Ultimate Watermark allows Exploiting... Moderate Unreviewed
CVE-2025-57985 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57980 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57989 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57999 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-58231 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57973 was published Sep 22, 2025
Missing Authorization vulnerability in RadiusTheme Team allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2025-57975 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57979 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57929 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57926 was published Sep 22, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-57965 was published Sep 22, 2025
Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-57969 was published Sep 22, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Bytes.co WP Compiler allows Cross Site Request... Moderate Unreviewed
CVE-2025-58032 was published Sep 22, 2025
Authorization Bypass Through User-Controlled Key vulnerability in Sayful Islam Upcoming Events... Moderate Unreviewed
CVE-2025-57994 was published Sep 22, 2025
Missing Authorization vulnerability in solwininfotech Blog Designer allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-57990 was published Sep 22, 2025
Missing Authorization vulnerability in Clariti Clariti allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2025-57991 was published Sep 22, 2025
Missing Authorization vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool allows... Moderate Unreviewed
CVE-2025-57944 was published Sep 22, 2025
Missing Authorization vulnerability in memberful Memberful allows Accessing Functionality Not... Moderate Unreviewed
CVE-2025-58000 was published Sep 22, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database