GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,274
Erlang
31
GitHub Actions
21
Go
2,056
Maven
5,000+
npm
3,740
NuGet
668
pip
3,419
Pub
12
RubyGems
891
Rust
872
Swift
36
Unreviewed advisories
All unreviewed
5,000+
26,996 advisories
Filter by severity
A vulnerability classified as problematic has been found in code-projects Hospital Management...
Moderate
Unreviewed
CVE-2024-12983
was published
Dec 27, 2024
A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. It has been...
Moderate
Unreviewed
CVE-2024-12982
was published
Dec 27, 2024
A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as...
Moderate
Unreviewed
CVE-2024-12980
was published
Dec 27, 2024
A vulnerability was found in code-projects Job Recruitment 1.0 and classified as problematic....
Moderate
Unreviewed
CVE-2024-12979
was published
Dec 27, 2024
Marp Core allows XSS by improper neutralization of HTML sanitization
Moderate
CVE-2024-56510
was published
for
@marp-team/marp-core
(npm)
Dec 26, 2024
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as...
Moderate
Unreviewed
CVE-2024-12933
was published
Dec 26, 2024
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as...
Moderate
Unreviewed
CVE-2024-12932
was published
Dec 26, 2024
A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic....
Moderate
Unreviewed
CVE-2024-12930
was published
Dec 26, 2024
The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored...
Moderate
Unreviewed
CVE-2024-12268
was published
Dec 24, 2024
The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
Moderate
Unreviewed
CVE-2024-8721
was published
Dec 24, 2024
The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...
Moderate
Unreviewed
CVE-2024-12468
was published
Dec 24, 2024
The Text Prompter – Unlimited chatgpt text prompts for openai tasks plugin for WordPress is...
Moderate
Unreviewed
CVE-2024-11896
was published
Dec 24, 2024
The Loan Comparison plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
Moderate
Unreviewed
CVE-2024-12814
was published
Dec 24, 2024
The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site...
Moderate
Unreviewed
CVE-2024-12622
was published
Dec 24, 2024
The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
Moderate
Unreviewed
CVE-2024-12507
was published
Dec 24, 2024
The ShMapper by Teplitsa plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
Moderate
Unreviewed
CVE-2024-12518
was published
Dec 24, 2024
The WP-Appbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page'...
Moderate
Unreviewed
CVE-2024-12710
was published
Dec 24, 2024
The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
Moderate
Unreviewed
CVE-2024-11885
was published
Dec 24, 2024
The Bitcoin Lightning Publisher for WordPress plugin for WordPress is vulnerable to Reflected...
Moderate
Unreviewed
CVE-2024-12100
was published
Dec 24, 2024
The Export Customers Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...
Moderate
Unreviewed
CVE-2024-12405
was published
Dec 24, 2024
Cross Site Scripting (XSS) vulnerability while uploading content to a new deployment
Moderate
GHSA-64gp-r758-8pfm
was published
for
org.jboss.hal:hal-console
(Maven)
Dec 23, 2024
Cross-site Scripting vulnerability in SimpleXLSXEx::readThemeColors, SimpleXLSXEx::getColorValue and SimpleXLSX::toHTMLEx
Moderate
CVE-2024-56364
was published
for
shuchkin/simplexlsx
(Composer)
Dec 23, 2024
The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site...
Moderate
Unreviewed
CVE-2024-11230
was published
Dec 23, 2024
A stored cross-site scripting (XSS) vulnerability in the Calendar feature of REDCap through 15.0...
Moderate
Unreviewed
CVE-2024-56313
was published
Dec 23, 2024
A stored cross-site scripting (XSS) vulnerability in the Project name of REDCap through 15.0.0...
Moderate
Unreviewed
CVE-2024-56314
was published
Dec 23, 2024
ProTip!
Advisories are also available from the
GraphQL API