Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,087
Maven
5,000+
npm
3,751
NuGet
674
pip
3,437
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

241,654 advisories

Loading
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &... Moderate Unreviewed
CVE-2025-0318 was published Jan 18, 2025
The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2025-0554 was published Jan 18, 2025
The List category posts WordPress plugin before 0.90.3 does not validate and escape some of its... Unknown Unreviewed
CVE-2024-9020 was published Jan 18, 2025
The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is... Moderate Unreviewed
CVE-2024-13515 was published Jan 18, 2025
The Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting... Moderate Unreviewed
CVE-2024-13516 was published Jan 18, 2025
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &... High Unreviewed
CVE-2025-0308 was published Jan 18, 2025
The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin... Moderate Unreviewed
CVE-2024-12071 was published Jan 18, 2025
In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing... Unknown Unreviewed
CVE-2018-9383 was published Jan 18, 2025
In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout... Unknown Unreviewed
CVE-2018-9434 was published Jan 18, 2025
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access... Critical Unreviewed
CVE-2017-13322 was published Jan 18, 2025
In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete... Unknown Unreviewed
CVE-2018-9375 was published Jan 18, 2025
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This... Moderate Unreviewed
CVE-2025-0541 was published Jan 18, 2025
In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the... Unknown Unreviewed
CVE-2018-9447 was published Jan 18, 2025
In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of... Unknown Unreviewed
CVE-2018-9379 was published Jan 18, 2025
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Unknown Unreviewed
CVE-2021-0323 was published Jan 18, 2025
Rejected reason: Further investigation determines issue is not a vulnerability Unknown Unreviewed
CVE-2022-0303 was published Jan 18, 2025
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Unknown Unreviewed
CVE-2021-0447 was published Jan 18, 2025
In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This... Unknown Unreviewed
CVE-2018-9384 was published Jan 18, 2025
In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an... Unknown Unreviewed
CVE-2018-9387 was published Jan 18, 2025
In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot... Unknown Unreviewed
CVE-2018-9382 was published Jan 18, 2025
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Unknown Unreviewed
CVE-2020-0402 was published Jan 18, 2025
In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a... Unknown Unreviewed
CVE-2018-9389 was published Jan 18, 2025
Rejected reason: Further investigation determines issue is not within scope of this CNA Unknown Unreviewed
CVE-2021-21158 was published Jan 18, 2025
In NlpService, there is a possible way to obtain location information due to a missing permission... Unknown Unreviewed
CVE-2018-9406 was published Jan 18, 2025
In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a... Unknown Unreviewed
CVE-2018-9405 was published Jan 18, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database