GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,361
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,794
NuGet
685
pip
3,473
Pub
12
RubyGems
895
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+
3,897 advisories
Filter by severity
Due to missing authorization check, an authenticated attacker could call a remote-enabled...
Moderate
Unreviewed
CVE-2025-23190
was published
Feb 11, 2025
Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an...
Moderate
Unreviewed
CVE-2025-23189
was published
Feb 11, 2025
Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an...
Moderate
Unreviewed
CVE-2025-23187
was published
Feb 11, 2025
Missing Authorization vulnerability in blackandwhitedigital BookPress – For Book Authors allows...
High
Unreviewed
CVE-2025-25167
was published
Feb 7, 2025
Missing Authorization vulnerability in Metagauss Event Kikfyre allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-25110
was published
Feb 7, 2025
Missing Authorization vulnerability in Melodic Media Slide Banners allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-25120
was published
Feb 7, 2025
Missing Authorization vulnerability in DeannaS Embed RSS allows Exploiting Incorrectly Configured...
Moderate
Unreviewed
CVE-2025-25081
was published
Feb 7, 2025
An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to...
Moderate
Unreviewed
CVE-2024-3976
was published
Feb 5, 2025
An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9...
Moderate
Unreviewed
CVE-2024-1539
was published
Feb 5, 2025
Missing Authorization vulnerability in FameThemes OnePress allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22643
was published
Feb 4, 2025
Missing Authorization vulnerability in Ksher Ksher allows Exploiting Incorrectly Configured...
Moderate
Unreviewed
CVE-2025-22730
was published
Feb 4, 2025
Missing Authorization vulnerability in EmbedPress Document Block – Upload & Embed Docs. This...
Moderate
Unreviewed
CVE-2025-22696
was published
Feb 4, 2025
The SocialV - Social Network and Community BuddyPress Theme theme for WordPress is vulnerable to...
Moderate
Unreviewed
CVE-2024-13529
was published
Feb 4, 2025
Incorrect access control in Geovision GV-ASWeb version 6.1.0.0 or less allows unauthorized...
High
Unreviewed
CVE-2024-56898
was published
Feb 3, 2025
Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This...
Moderate
Unreviewed
CVE-2023-52163
was published
Feb 3, 2025
An issue in Geovision GV-ASWeb with version 6.1.0.0 or less allows unauthorized attackers with...
Moderate
Unreviewed
CVE-2024-56902
was published
Feb 3, 2025
The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing...
Moderate
Unreviewed
CVE-2024-11133
was published
Feb 3, 2025
The Eventer plugin for WordPress is vulnerable to unauthorized access of data due to a missing...
Moderate
Unreviewed
CVE-2024-11134
was published
Feb 3, 2025
Missing Authorization vulnerability in Realwebcare Image Gallery – Responsive Photo Gallery...
Moderate
Unreviewed
CVE-2025-24697
was published
Feb 3, 2025
Missing Authorization vulnerability in theme funda Setup Default Featured Image allows Exploiting...
Moderate
Unreviewed
CVE-2025-24642
was published
Feb 3, 2025
Missing Authorization vulnerability in Amento Tech Pvt ltd WPGuppy allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-24643
was published
Feb 3, 2025
Missing Authorization vulnerability in Hemnath Mouli WC Wallet allows Accessing Functionality Not...
Moderate
Unreviewed
CVE-2025-23527
was published
Feb 3, 2025
Missing Authorization vulnerability in Pixelite Meta Tag Manager. This issue affects Meta Tag...
Moderate
Unreviewed
CVE-2025-22260
was published
Feb 3, 2025
Missing Authorization vulnerability in UIUX Lab Uix Shortcodes allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22677
was published
Feb 3, 2025
Missing Authorization vulnerability in Xfinity Soft Content Cloner allows Exploiting Incorrectly...
Moderate
Unreviewed
CVE-2025-22681
was published
Feb 3, 2025
ProTip!
Advisories are also available from the
GraphQL API