GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,299
Erlang
31
GitHub Actions
21
Go
2,065
Maven
5,000+
npm
3,744
NuGet
668
pip
3,425
Pub
12
RubyGems
892
Rust
877
Swift
36
Unreviewed advisories
All unreviewed
5,000+
121,048 advisories
Filter by severity
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22577
was published
Jan 7, 2025
Missing Authorization vulnerability in Etruel Developments LLC WP Delete Post Copies allows...
Moderate
Unreviewed
CVE-2025-22541
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22551
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22580
was published
Jan 7, 2025
Missing Authorization vulnerability in Saoshyant.1994 Saoshyant Page Builder allows Exploiting...
Moderate
Unreviewed
CVE-2025-22560
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22549
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22546
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22581
was published
Jan 7, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Faaiq Pretty Url allows Cross Site Request...
Moderate
Unreviewed
CVE-2025-22563
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22572
was published
Jan 7, 2025
Various module chromes didn't properly process inputs, leading to XSS vectors.
Moderate
Unreviewed
CVE-2024-40747
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22550
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22579
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22554
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22532
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22528
was published
Jan 7, 2025
Missing Authorization vulnerability in Beautiful Templates ST Gallery WP allows Exploiting...
Moderate
Unreviewed
CVE-2025-22543
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22558
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22578
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22584
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22573
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22574
was published
Jan 7, 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Moderate
Unreviewed
CVE-2025-22515
was published
Jan 7, 2025
A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical...
Moderate
Unreviewed
CVE-2025-0297
was published
Jan 7, 2025
Missing Authorization vulnerability in Sprout Apps Help Scout allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22512
was published
Jan 7, 2025
ProTip!
Advisories are also available from the
GraphQL API