GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,656
Maven
5,000+
npm
4,284
NuGet
760
pip
4,069
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
6,111 advisories
Filter by severity
A broken access control (BAC) vulnerability in the web-based management interface could allow an...
Moderate
Unreviewed
CVE-2025-37160
was published
Nov 18, 2025
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC...
Moderate
Unreviewed
CVE-2025-54971
was published
Nov 18, 2025
The Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more...
Moderate
Unreviewed
CVE-2025-12545
was published
Nov 18, 2025
In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly...
Moderate
Unreviewed
CVE-2025-12149
was published
Nov 14, 2025
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to...
Moderate
Unreviewed
CVE-2025-12784
was published
Nov 13, 2025
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to...
Moderate
Unreviewed
CVE-2025-12785
was published
Nov 13, 2025
The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive...
Moderate
Unreviewed
CVE-2025-12681
was published
Nov 13, 2025
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2025-12732
was published
Nov 12, 2025
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises...
Moderate
Unreviewed
CVE-2025-62206
was published
Nov 11, 2025
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an...
Moderate
Unreviewed
CVE-2025-59240
was published
Nov 11, 2025
The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2025-11997
was published
Nov 11, 2025
The Authors List plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
Moderate
Unreviewed
CVE-2025-12010
was published
Nov 11, 2025
The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is...
Moderate
Unreviewed
CVE-2025-12098
was published
Nov 8, 2025
Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean...
Moderate
Unreviewed
CVE-2025-55342
was published
Nov 5, 2025
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an...
Moderate
Unreviewed
CVE-2025-20377
was published
Nov 5, 2025
ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests...
Moderate
Unreviewed
CVE-2025-59716
was published
Nov 5, 2025
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin...
Moderate
Unreviewed
CVE-2025-12468
was published
Nov 5, 2025
The KiotViet Sync plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
Moderate
Unreviewed
CVE-2025-12677
was published
Nov 5, 2025
codeshare v1.0.0 was discovered to contain an information leakage vulnerability.
Moderate
Unreviewed
CVE-2025-60925
was published
Nov 4, 2025
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1...
Moderate
Unreviewed
CVE-2025-43460
was published
Nov 4, 2025
The issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An...
Moderate
Unreviewed
CVE-2025-43495
was published
Nov 4, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-43479
was published
Nov 4, 2025
A privacy issue was addressed with improved checks. This issue is fixed in watchOS 26.1, iOS 26.1...
Moderate
Unreviewed
CVE-2025-43455
was published
Nov 4, 2025
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma...
Moderate
Unreviewed
CVE-2025-43411
was published
Nov 4, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2025-43378
was published
Nov 4, 2025
ProTip!
Advisories are also available from the
GraphQL API