GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,133
Erlang
29
GitHub Actions
19
Go
1,940
Maven
5,000+
npm
3,677
NuGet
645
pip
3,295
Pub
11
RubyGems
877
Rust
830
Swift
35
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
91,086 advisories
Filter by severity
Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine &...
High
Unreviewed
CVE-2023-32501
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo – Social Network,...
High
Unreviewed
CVE-2023-32092
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways – Grow your...
High
Unreviewed
CVE-2023-31086
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6...
High
Unreviewed
CVE-2023-32125
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Faraz Quazi Floating Action Button plugin <= 1...
High
Unreviewed
CVE-2023-31088
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in xtemos WoodMart - Multipurpose WooCommerce...
High
Unreviewed
CVE-2023-32500
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Criss Swaim TPG Redirect plugin <= 1.0.7...
High
Unreviewed
CVE-2023-32093
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Sybre Waaijer Pro Mime Types – Manage file...
High
Unreviewed
CVE-2023-32502
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Designs & Code Forget About Shortcode Buttons...
High
Unreviewed
CVE-2023-32579
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Palasthotel by Edward Bock, Katharina Rompf...
High
Unreviewed
CVE-2023-32592
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in ShortPixel ShortPixel Adaptive Images – WebP,...
High
Unreviewed
CVE-2023-32512
was published
Nov 10, 2023
Cross-Site Request Forgery (CSRF) vulnerability in WP Reactions, LLC WP Reactions Lite plugin <=...
High
Unreviewed
CVE-2023-32587
was published
Nov 10, 2023
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any...
High
Unreviewed
CVE-2023-29975
was published
Nov 10, 2023
An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2...
High
Unreviewed
CVE-2023-4379
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Guillemant David WP Full Auto Tags Manager...
High
Unreviewed
CVE-2023-34024
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Pascal Casier bbPress Toolkit plugin <= 1.0.12...
High
Unreviewed
CVE-2023-34031
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3...
High
Unreviewed
CVE-2023-32794
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Recommendations plugin <=...
High
Unreviewed
CVE-2023-32744
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Web_Trendy WP Custom Cursors | WordPress...
High
Unreviewed
CVE-2023-32739
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Benedict B., Maciej Gryniuk Hyphenator plugin ...
High
Unreviewed
CVE-2023-32594
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions.
High
Unreviewed
CVE-2023-32745
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in LOKALYZE CALL ME NOW plugin <= 3.0 versions.
High
Unreviewed
CVE-2023-32602
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Hide Login plugin <= 2.1.6 versions.
High
Unreviewed
CVE-2023-34025
was published
Nov 9, 2023
A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create()...
High
Unreviewed
CVE-2023-39198
was published
Nov 9, 2023
Cross-Site Request Forgery (CSRF) vulnerability in WP-Cirrus plugin <= 0.6.11 versions.
High
Unreviewed
CVE-2023-34181
was published
Nov 9, 2023
ProTip!
Advisories are also available from the
GraphQL API