Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,785
Erlang
36
GitHub Actions
29
Go
2,358
Maven
5,000+
npm
3,979
NuGet
720
pip
3,777
Pub
12
RubyGems
924
Rust
981
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

505 advisories

Loading
Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2 and WRC-1167GST2. If... Moderate Unreviewed
CVE-2025-36519 was published Jun 24, 2025
A vulnerability, which was classified as critical, was found in SourceCodester Simple Food... Moderate Unreviewed
CVE-2025-6161 was published Jun 17, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in Agile Logix Store Locator... Moderate Unreviewed
CVE-2025-49329 was published Jun 6, 2025
A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management... Moderate Unreviewed
CVE-2025-5728 was published Jun 6, 2025
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin... Moderate Unreviewed
CVE-2025-1725 was published Jun 3, 2025
An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper... Moderate Unreviewed
CVE-2024-7074 was published Jun 2, 2025
HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of... Moderate Unreviewed
CVE-2025-46078 was published May 29, 2025
HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass... Moderate Unreviewed
CVE-2025-46080 was published May 29, 2025
A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up... Moderate Unreviewed
CVE-2025-5178 was published May 26, 2025
A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training... Moderate Unreviewed
CVE-2025-5171 was published May 26, 2025
A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02... Moderate Unreviewed
CVE-2025-5162 was published May 26, 2025
A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This... Moderate Unreviewed
CVE-2025-5130 was published May 24, 2025
A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This... Moderate Unreviewed
CVE-2025-5131 was published May 24, 2025
File upload and execute vulnerabilities in ASPECT allow PHP script injection if session... Moderate Unreviewed
CVE-2025-30169 was published May 22, 2025
File upload vulnerabilities are present in ASPECT if session administrator credentials become... Moderate Unreviewed
CVE-2025-30173 was published May 22, 2025
Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are... Moderate Unreviewed
CVE-2025-3444 was published May 22, 2025
The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads... Moderate Unreviewed
CVE-2024-9544 was published May 22, 2025
A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0.... Moderate Unreviewed
CVE-2025-5059 was published May 22, 2025
A vulnerability was found in PHPGurukul Car Rental Project 1.0 and classified as critical.... Moderate Unreviewed
CVE-2025-4926 was published May 19, 2025
A vulnerability, which was classified as critical, has been found in SourceCodester Client... Moderate Unreviewed
CVE-2025-4923 was published May 19, 2025
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as... Moderate Unreviewed
CVE-2025-4735 was published May 16, 2025
A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects... Moderate Unreviewed
CVE-2025-4538 was published May 11, 2025
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been... Moderate Unreviewed
CVE-2025-4468 was published May 9, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Instantio allows Upload... Moderate Unreviewed
CVE-2025-47550 was published May 7, 2025
A vulnerability classified as critical has been found in itsourcecode Content Management System 1... Moderate Unreviewed
CVE-2025-4310 was published May 6, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database