Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,486
Erlang
33
GitHub Actions
24
Go
2,211
Maven
5,000+
npm
3,868
NuGet
696
pip
3,642
Pub
12
RubyGems
913
Rust
920
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

117,535 advisories

Loading
Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Daggerhart Query Wrangler allows... Moderate Unreviewed
CVE-2025-31779 was published Apr 1, 2025
Cross-Site Request Forgery (CSRF) vulnerability in smackcoders Google SEO Pressor Snippet allows... Moderate Unreviewed
CVE-2025-31775 was published Apr 1, 2025
Missing Authorization vulnerability in Andy Stratton Append Content allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-31780 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31783 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31770 was published Apr 1, 2025
Cross-Site Request Forgery (CSRF) vulnerability in NiteoThemes CLP – Custom Login Page by... Moderate Unreviewed
CVE-2025-31769 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31767 was published Apr 1, 2025
Missing Authorization vulnerability in BeastThemes Clockinator Lite allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-31777 was published Apr 1, 2025
Missing Authorization vulnerability in cedcommerce Ship Per Product allows Accessing... Moderate Unreviewed
CVE-2025-31773 was published Apr 1, 2025
Cross-Site Request Forgery (CSRF) vulnerability in tuyennv TZ PlusGallery allows Cross Site... Moderate Unreviewed
CVE-2025-31756 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31759 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31760 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31750 was published Apr 1, 2025
Missing Authorization vulnerability in termel Bulk Fields Editor allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-31752 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31766 was published Apr 1, 2025
Missing Authorization vulnerability in josselynj pCloud Backup allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-31755 was published Apr 1, 2025
Cross-Site Request Forgery (CSRF) vulnerability in doit Breaking News WP allows Cross Site... Moderate Unreviewed
CVE-2025-31751 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31742 was published Apr 1, 2025
Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View allows... Moderate Unreviewed
CVE-2025-31757 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31764 was published Apr 1, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Preliot Cache control by Cacholong allows... Moderate Unreviewed
CVE-2025-31763 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31745 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31749 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31748 was published Apr 1, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... Moderate Unreviewed
CVE-2025-31762 was published Apr 1, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database