Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,273
Erlang
31
GitHub Actions
21
Go
2,055
Maven
5,000+
npm
3,739
NuGet
668
pip
3,417
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

110,968 advisories

Loading
Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse:... Moderate Unreviewed
CVE-2024-35168 was published Jun 11, 2024
Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a... Moderate Unreviewed
CVE-2024-35667 was published Jun 11, 2024
Missing Authorization vulnerability in namithjawahar Insert Post Ads.This issue affects Insert... Moderate Unreviewed
CVE-2024-35665 was published Jun 11, 2024
Missing Authorization vulnerability in Tobias Conrad Design for Contact Form 7 Style WordPress... Moderate Unreviewed
CVE-2024-34826 was published Jun 11, 2024
Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a... Moderate Unreviewed
CVE-2024-32148 was published Jun 11, 2024
A improper neutralization of special elements used in an sql command ('sql injection') in... Moderate Unreviewed
CVE-2024-31495 was published Jun 11, 2024
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting... Moderate Unreviewed
CVE-2024-23111 was published Jun 11, 2024
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue... Moderate Unreviewed
CVE-2024-35628 was published Jun 11, 2024
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects... Moderate Unreviewed
CVE-2023-52183 was published Jun 11, 2024
Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through... Moderate Unreviewed
CVE-2024-34442 was published Jun 11, 2024
Missing Authorization vulnerability in Minoji MJ Update History.This issue affects MJ Update... Moderate Unreviewed
CVE-2024-35671 was published Jun 11, 2024
Multiple improper neutralization of special elements used in SQL commands ('SQL Injection')... Moderate Unreviewed
CVE-2023-23775 was published Jun 11, 2024
Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects... Moderate Unreviewed
CVE-2023-51498 was published Jun 11, 2024
Missing Authorization vulnerability in Matthias Pfefferle & Automattic ActivityPub.This issue... Moderate Unreviewed
CVE-2023-52199 was published Jun 11, 2024
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce... Moderate Unreviewed
CVE-2024-5189 was published Jun 11, 2024
Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects... Moderate Unreviewed
CVE-2024-35683 was published Jun 11, 2024
A vulnerability exists in the message queueing mechanism that if exploited can lead to the... Moderate Unreviewed
CVE-2024-28023 was published Jun 11, 2024
By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid... Moderate Unreviewed
CVE-2024-5698 was published Jun 11, 2024
A website was able to detect when a user took a screenshot of a page using the built-in... Moderate Unreviewed
CVE-2024-5697 was published Jun 11, 2024
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7... Moderate Unreviewed
CVE-2023-46720 was published Jun 11, 2024
If a specific sequence of actions is performed when opening a new tab, the triggering principal... Moderate Unreviewed
CVE-2024-5687 was published Jun 11, 2024
Offscreen Canvas did not properly track cross-origin tainting, which could be used to access... Moderate Unreviewed
CVE-2024-5693 was published Jun 11, 2024
On Windows, when using the 'Save As' functionality, an attacker could have tricked the browser... Moderate Unreviewed
CVE-2024-5692 was published Jun 11, 2024
By monitoring the time certain operations take, an attacker could have guessed which external... Moderate Unreviewed
CVE-2024-5690 was published Jun 11, 2024
In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay... Moderate Unreviewed
CVE-2024-5689 was published Jun 11, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database