Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
38
Go
2,766
Maven
5,000+
npm
4,371
NuGet
767
pip
4,144
Pub
12
RubyGems
962
Rust
1,070
Swift
45
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

281,786 advisories

Loading
A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of... High Unreviewed
CVE-2025-14995 was published Dec 21, 2025
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the... High Unreviewed
CVE-2025-14994 was published Dec 21, 2025
The SureForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form... High Unreviewed
CVE-2025-14855 was published Dec 21, 2025
The Redirection for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads... High Unreviewed
CVE-2025-14800 was published Dec 21, 2025
A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the... High Unreviewed
CVE-2025-14993 was published Dec 21, 2025
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2025-13693 was published Dec 21, 2025
Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL... High Unreviewed
CVE-2025-68644 was published Dec 21, 2025
A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System... Moderate Unreviewed
CVE-2025-14990 was published Dec 21, 2025
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to... High Unreviewed
CVE-2025-9343 was published Dec 21, 2025
A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the... High Unreviewed
CVE-2025-14992 was published Dec 21, 2025
A weakness has been identified in Campcodes Complete Online Beauty Parlor Management System 1.0.... Moderate Unreviewed
CVE-2025-14991 was published Dec 21, 2025
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to... Low Unreviewed
CVE-2025-12654 was published Dec 21, 2025
The Product Table for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site... Moderate Unreviewed
CVE-2025-12398 was published Dec 21, 2025
The Web to SugarCRM Lead plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... Moderate Unreviewed
CVE-2025-13361 was published Dec 21, 2025
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &... Moderate Unreviewed
CVE-2025-13220 was published Dec 21, 2025
The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is... High Unreviewed
CVE-2025-12980 was published Dec 21, 2025
The WC Builder – WooCommerce Page Builder for WPBakery plugin for WordPress is vulnerable to... Moderate Unreviewed
CVE-2025-14054 was published Dec 21, 2025
The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing... Moderate Unreviewed
CVE-2025-14080 was published Dec 21, 2025
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP... High Unreviewed
CVE-2025-14071 was published Dec 21, 2025
The WishSuite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... Moderate Unreviewed
CVE-2025-13838 was published Dec 21, 2025
The Tainacan plugin for WordPress is vulnerable to unauthorized metadata section creation due to... Moderate Unreviewed
CVE-2025-14043 was published Dec 21, 2025
Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting... High Unreviewed
CVE-2023-25446 was published Dec 21, 2025
Missing Authorization vulnerability in HappyFiles HappyFiles Pro allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2023-25445 was published Dec 21, 2025
The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is... Moderate Unreviewed
CVE-2025-11496 was published Dec 21, 2025
Vulnerability in mojofywp WP Affiliate Disclosure wp-affiliate-disclosure.This issue affects WP... Moderate Unreviewed
CVE-2023-47232 was published Dec 21, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database