Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,300
Erlang
31
GitHub Actions
21
Go
2,069
Maven
5,000+
npm
3,744
NuGet
668
pip
3,429
Pub
12
RubyGems
892
Rust
880
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

2,585 advisories

Loading
The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3,... Moderate Unreviewed
CVE-2024-12473 was published Jan 10, 2025
The WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is... Moderate Unreviewed
CVE-2024-12067 was published Jan 9, 2025
The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection... Moderate Unreviewed
CVE-2024-12030 was published Jan 8, 2025
A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical... Moderate Unreviewed
CVE-2025-0297 was published Jan 7, 2025
A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as... Moderate Unreviewed
CVE-2025-0296 was published Jan 7, 2025
The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection... Moderate Unreviewed
CVE-2024-12332 was published Jan 7, 2025
The Timeline Designer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter... Moderate Unreviewed
CVE-2024-11437 was published Jan 7, 2025
The WP Project Manager – Task, team, and project management plugin featuring kanban board and... Moderate Unreviewed
CVE-2024-12195 was published Jan 4, 2025
A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It... Moderate Unreviewed
CVE-2025-0174 was published Jan 3, 2025
Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection. Moderate Unreviewed
CVE-2025-22214 was published Jan 2, 2025
A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record... Moderate Unreviewed
CVE-2024-13085 was published Jan 1, 2025
A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected... Moderate Unreviewed
CVE-2024-13084 was published Jan 1, 2025
A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical.... Moderate Unreviewed
CVE-2024-13078 was published Dec 31, 2024
A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical.... Moderate Unreviewed
CVE-2024-13079 was published Dec 31, 2024
A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been... Moderate Unreviewed
CVE-2024-13072 was published Dec 31, 2024
Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL... Moderate Unreviewed
CVE-2024-46542 was published Dec 30, 2024
A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been... Moderate Unreviewed
CVE-2024-13037 was published Dec 30, 2024
A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. This... Moderate Unreviewed
CVE-2024-13035 was published Dec 30, 2024
A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue... Moderate Unreviewed
CVE-2024-13036 was published Dec 30, 2024
The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is... Moderate Unreviewed
CVE-2024-10862 was published Dec 25, 2024
The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin |... Moderate Unreviewed
CVE-2024-12032 was published Dec 25, 2024
The Advanced Floating Content plugin for WordPress is vulnerable to SQL Injection via the ... Moderate Unreviewed
CVE-2024-12031 was published Dec 24, 2024
The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id... Moderate Unreviewed
CVE-2024-10856 was published Dec 24, 2024
The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress... Moderate Unreviewed
CVE-2024-11726 was published Dec 24, 2024
A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been... Moderate Unreviewed
CVE-2024-12898 was published Dec 23, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database