GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,300
Erlang
31
GitHub Actions
21
Go
2,069
Maven
5,000+
npm
3,744
NuGet
668
pip
3,429
Pub
12
RubyGems
892
Rust
877
Swift
36
Unreviewed advisories
All unreviewed
5,000+
12,987 advisories
Filter by severity
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Critical
Unreviewed
CVE-2025-22540
was published
Jan 9, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22537
was published
Jan 9, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Critical
Unreviewed
CVE-2025-22542
was published
Jan 9, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22505
was published
Jan 9, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22527
was published
Jan 9, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22535
was published
Jan 9, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2024-7026
was published
Jan 9, 2025
The WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-12067
was published
Jan 9, 2025
An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5....
High
Unreviewed
CVE-2024-55517
was published
Jan 8, 2025
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to blind time-based SQL...
High
Unreviewed
CVE-2024-11939
was published
Jan 8, 2025
The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection...
Moderate
Unreviewed
CVE-2024-12030
was published
Jan 8, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22350
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22536
was published
Jan 7, 2025
A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical...
Moderate
Unreviewed
CVE-2025-0297
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22502
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22507
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22519
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22533
was published
Jan 7, 2025
Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable...
High
Unreviewed
CVE-2024-48245
was published
Jan 7, 2025
A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as...
Moderate
Unreviewed
CVE-2025-0296
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22348
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22349
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22351
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
High
Unreviewed
CVE-2025-22352
was published
Jan 7, 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
Critical
Unreviewed
CVE-2024-56284
was published
Jan 7, 2025
ProTip!
Advisories are also available from the
GraphQL API