Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,373
Erlang
33
GitHub Actions
22
Go
2,135
Maven
5,000+
npm
3,797
NuGet
687
pip
3,478
Pub
12
RubyGems
896
Rust
897
Swift
38
Unreviewed advisories
All unreviewed
5,000+

3,908 advisories

Loading
Missing Authorization vulnerability in appsbd Vitepos allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2025-26750 was published Feb 22, 2025
Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator... Moderate Unreviewed
CVE-2025-26764 was published Feb 22, 2025
Leantime has Missing Authorization Check for Host Parameter Low
GHSA-3hfj-qcvj-4hx8 was published for leantime/leantime (Composer) Feb 21, 2025
harshilsecurify
The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of... Moderate Unreviewed
CVE-2025-1402 was published Feb 21, 2025
The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized... Moderate Unreviewed
CVE-2025-1483 was published Feb 20, 2025
The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is... Moderate Unreviewed
CVE-2024-13520 was published Feb 20, 2025
The product does not perform an authorization check when an actor attempts to access a resource... Moderate Unreviewed
CVE-2024-37363 was published Feb 20, 2025
The WordPress Portfolio Builder – Portfolio Gallery plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2024-13231 was published Feb 19, 2025
The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing... Moderate Unreviewed
CVE-2024-13364 was published Feb 19, 2025
The PeproDev Ultimate Invoice plugin for WordPress is vulnerable to Insecure Direct Object... Moderate Unreviewed
CVE-2024-13719 was published Feb 19, 2025
The Trash Duplicate and 301 Redirect plugin for WordPress is vulnerable to unauthorized loss of... High Unreviewed
CVE-2024-13468 was published Feb 19, 2025
Missing Authorization vulnerability in EPC MediCenter - Health Medical Clinic WordPress Theme... Moderate Unreviewed
CVE-2025-27013 was published Feb 18, 2025
Missing Authorization vulnerability in Vito Peleg Atarim allows Exploiting Incorrectly Configured... High Unreviewed
CVE-2025-22657 was published Feb 18, 2025
Restricted Views backed objects (OSV1) could be bypassed under specific circumstances due to a... Moderate Unreviewed
CVE-2024-49589 was published Feb 18, 2025
The FormCraft plugin for WordPress is vulnerable to unauthorized access of data due to a missing... Moderate Unreviewed
CVE-2024-13783 was published Feb 18, 2025
The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals... Moderate Unreviewed
CVE-2024-13316 was published Feb 18, 2025
The GetBookingsWP – Appointments Booking Calendar Plugin For WordPress plugin for WordPress is... High Unreviewed
CVE-2024-13677 was published Feb 18, 2025
The Team Builder – Meet the Team plugin for WordPress is vulnerable to unauthorized modification... Moderate Unreviewed
CVE-2024-13687 was published Feb 18, 2025
The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress... High Unreviewed
CVE-2024-13556 was published Feb 18, 2025
Missing Authorization vulnerability in Adnan Analytify allows Exploiting Incorrectly Configured... Moderate Unreviewed
CVE-2025-26773 was published Feb 17, 2025
Missing Authorization vulnerability in NotFound LTL Freight Quotes – Unishippers Edition allows... Moderate Unreviewed
CVE-2025-22289 was published Feb 17, 2025
Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express... Moderate Unreviewed
CVE-2025-22291 was published Feb 17, 2025
Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator... Moderate Unreviewed
CVE-2025-26765 was published Feb 17, 2025
The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access... Moderate Unreviewed
CVE-2024-13439 was published Feb 15, 2025
The WP Project Manager – Task, team, and project management plugin featuring kanban board and... Moderate Unreviewed
CVE-2024-13752 was published Feb 15, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database