Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,324
Erlang
31
GitHub Actions
21
Go
2,079
Maven
5,000+
npm
3,747
NuGet
674
pip
3,435
Pub
12
RubyGems
892
Rust
881
Swift
37
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

112,564 advisories

Loading
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid... Moderate Unreviewed
CVE-2024-55916 was published Jan 11, 2025
The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5... Moderate Unreviewed
CVE-2024-54540 was published Jan 15, 2025
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: iso: Fix circular... Moderate Unreviewed
CVE-2024-54460 was published Jan 11, 2025
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: pltfrm: Dellocate... Moderate Unreviewed
CVE-2024-57872 was published Jan 11, 2025
In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix for... Moderate Unreviewed
CVE-2024-57807 was published Jan 11, 2025
In the Linux kernel, the following vulnerability has been resolved: netfilter: IDLETIMER: Fix... Moderate Unreviewed
CVE-2024-54683 was published Jan 11, 2025
In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: don't call... Moderate Unreviewed
CVE-2024-57881 was published Jan 11, 2025
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2024-3650 was published May 2, 2024
In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx... Moderate Unreviewed
CVE-2024-57799 was published Jan 11, 2025
The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2024-1778 was published Feb 23, 2024
The Brizy – Page Builder plugin for WordPress is vulnerable to Directory Traversal in all... Moderate Unreviewed
CVE-2024-1165 was published Feb 26, 2024
Vulnerability in the PMB platform that allows an attacker to persist temporary files on the... Moderate Unreviewed
CVE-2025-0473 was published Jan 16, 2025
In the Linux kernel, the following vulnerability has been resolved: drm/modes: Avoid divide by... Moderate Unreviewed
CVE-2024-56369 was published Jan 11, 2025
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix TCP timers... Moderate Unreviewed
CVE-2024-54680 was published Jan 11, 2025
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in... Moderate Unreviewed
CVE-2024-6455 was published Jul 18, 2024
In the Linux kernel, the following vulnerability has been resolved: block: Prevent potential... Moderate Unreviewed
CVE-2024-55642 was published Jan 11, 2025
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... Moderate Unreviewed
CVE-2024-1293 was published Mar 13, 2024
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... Moderate Unreviewed
CVE-2024-1296 was published Mar 13, 2024
The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized plugin setting update... Moderate Unreviewed
CVE-2024-3711 was published May 23, 2024
The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site... Moderate Unreviewed
CVE-2024-1777 was published Feb 23, 2024
The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... Moderate Unreviewed
CVE-2024-1291 was published Mar 13, 2024
The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2024-1779 was published Feb 23, 2024
The Yuki theme for WordPress is vulnerable to unauthorized modification of data due to a missing... Moderate Unreviewed
CVE-2024-1388 was published Feb 28, 2024
The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2024-13387 was published Jan 16, 2025
The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to... Moderate Unreviewed
CVE-2024-12427 was published Jan 16, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database