GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,680
Maven
5,000+
npm
4,308
NuGet
760
pip
4,080
Pub
12
RubyGems
958
Rust
1,061
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
260 advisories
Filter by severity
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when...
Moderate
Unreviewed
CVE-2025-64063
was published
Nov 25, 2025
The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is...
Moderate
Unreviewed
CVE-2025-11815
was published
Nov 21, 2025
The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Improper Authorization leading...
Moderate
Unreviewed
CVE-2025-13085
was published
Nov 19, 2025
The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to authorization bypass in all...
Moderate
Unreviewed
CVE-2025-12777
was published
Nov 19, 2025
The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to unauthorized modification of...
Moderate
Unreviewed
CVE-2025-12814
was published
Nov 19, 2025
The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary...
Moderate
Unreviewed
CVE-2025-12494
was published
Nov 15, 2025
Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a...
Moderate
Unreviewed
CVE-2025-12435
was published
Nov 10, 2025
A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the...
Moderate
Unreviewed
CVE-2025-12854
was published
Nov 7, 2025
The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2025-12360
was published
Nov 6, 2025
The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Missing Authorization in...
Moderate
Unreviewed
CVE-2025-12367
was published
Nov 1, 2025
The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all...
Moderate
Unreviewed
CVE-2025-11174
was published
Nov 1, 2025
A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an...
Moderate
Unreviewed
CVE-2025-12288
was published
Oct 27, 2025
A security flaw has been discovered in code-projects Client Details System 1.0. The impacted...
Moderate
Unreviewed
CVE-2025-12283
was published
Oct 27, 2025
The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2025-6639
was published
Oct 25, 2025
The GenerateBlocks plugin for WordPress is vulnerable to unauthorized access of data due to a...
Moderate
Unreviewed
CVE-2025-11879
was published
Oct 25, 2025
The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is...
Moderate
Unreviewed
CVE-2025-12005
was published
Oct 25, 2025
The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due...
Moderate
Unreviewed
CVE-2025-10902
was published
Oct 24, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22168
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient...
Moderate
Unreviewed
CVE-2025-22170
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22169
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22172
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the...
Moderate
Unreviewed
CVE-2025-22171
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22173
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22174
was published
Oct 22, 2025
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected...
Moderate
Unreviewed
CVE-2025-22175
was published
Oct 22, 2025
ProTip!
Advisories are also available from the
GraphQL API