Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,656
Maven
5,000+
npm
4,284
NuGet
760
pip
4,069
Pub
12
RubyGems
957
Rust
1,057
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

6,113 advisories

Loading
The Quiz Maker plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Moderate Unreviewed
CVE-2025-12426 was published Nov 19, 2025
The New User Approve plugin for WordPress is vulnerable to unauthorized data disclosure in all... Moderate Unreviewed
CVE-2025-12770 was published Nov 19, 2025
A broken access control (BAC) vulnerability in the web-based management interface could allow an... Moderate Unreviewed
CVE-2025-37160 was published Nov 18, 2025
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC... Moderate Unreviewed
CVE-2025-54971 was published Nov 18, 2025
The Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more... Moderate Unreviewed
CVE-2025-12545 was published Nov 18, 2025
In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly... Moderate Unreviewed
CVE-2025-12149 was published Nov 14, 2025
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to... Moderate Unreviewed
CVE-2025-12784 was published Nov 13, 2025
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to... Moderate Unreviewed
CVE-2025-12785 was published Nov 13, 2025
The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive... Moderate Unreviewed
CVE-2025-12681 was published Nov 13, 2025
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-12732 was published Nov 12, 2025
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises... Moderate Unreviewed
CVE-2025-62206 was published Nov 11, 2025
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an... Moderate Unreviewed
CVE-2025-59240 was published Nov 11, 2025
The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-11997 was published Nov 11, 2025
The Authors List plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Moderate Unreviewed
CVE-2025-12010 was published Nov 11, 2025
The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is... Moderate Unreviewed
CVE-2025-12098 was published Nov 8, 2025
Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean... Moderate Unreviewed
CVE-2025-55342 was published Nov 5, 2025
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an... Moderate Unreviewed
CVE-2025-20377 was published Nov 5, 2025
ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests... Moderate Unreviewed
CVE-2025-59716 was published Nov 5, 2025
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin... Moderate Unreviewed
CVE-2025-12468 was published Nov 5, 2025
The KiotViet Sync plugin for WordPress is vulnerable to Sensitive Information Exposure in all... Moderate Unreviewed
CVE-2025-12677 was published Nov 5, 2025
codeshare v1.0.0 was discovered to contain an information leakage vulnerability. Moderate Unreviewed
CVE-2025-60925 was published Nov 4, 2025
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1... Moderate Unreviewed
CVE-2025-43460 was published Nov 4, 2025
The issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An... Moderate Unreviewed
CVE-2025-43495 was published Nov 4, 2025
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... Moderate Unreviewed
CVE-2025-43479 was published Nov 4, 2025
A privacy issue was addressed with improved checks. This issue is fixed in watchOS 26.1, iOS 26.1... Moderate Unreviewed
CVE-2025-43455 was published Nov 4, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database