GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,737
Maven
5,000+
npm
4,337
NuGet
764
pip
4,112
Pub
12
RubyGems
960
Rust
1,068
Swift
45
Unreviewed advisories
All unreviewed
5,000+
8,305 advisories
Filter by severity
STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers...
Moderate
Unreviewed
CVE-2021-47723
was published
Dec 9, 2025
OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with...
Moderate
Unreviewed
CVE-2021-47702
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Taylor Hawkes WP Fast Cache allows Cross Site...
Moderate
Unreviewed
CVE-2023-22675
was published
Dec 9, 2025
The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable...
Moderate
Unreviewed
CVE-2025-13924
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate FAQ ultimate-faqs allows...
Moderate
Unreviewed
CVE-2025-67590
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall allows...
Moderate
Unreviewed
CVE-2025-67591
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site...
Moderate
Unreviewed
CVE-2025-67593
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross...
Moderate
Unreviewed
CVE-2025-67595
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business...
Moderate
Unreviewed
CVE-2025-67596
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows...
Moderate
Unreviewed
CVE-2025-67598
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Jacques Malgrange Rencontre rencontre allows...
Unknown
Unreviewed
CVE-2025-67534
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail...
Unknown
Unreviewed
CVE-2025-67469
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site...
Moderate
Unreviewed
CVE-2025-67467
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for...
Unknown
Unreviewed
CVE-2025-67472
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross...
Unknown
Unreviewed
CVE-2025-66529
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link...
Unknown
Unreviewed
CVE-2025-67465
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon...
Unknown
Unreviewed
CVE-2025-66531
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows...
Unknown
Unreviewed
CVE-2025-67473
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact...
Unknown
Unreviewed
CVE-2025-67471
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Folio simple-folio allows...
Unknown
Unreviewed
CVE-2025-64256
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal New User Approve new-user-approve...
Unknown
Unreviewed
CVE-2025-63030
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in hogash Kallyas kallyas.This issue affects...
Moderate
Unreviewed
CVE-2025-63060
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in wpmediadownload Media Library File Download...
Unknown
Unreviewed
CVE-2025-62103
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in Michael Revellin-Clerc Media Library...
Unknown
Unreviewed
CVE-2025-62734
was published
Dec 9, 2025
Cross-Site Request Forgery (CSRF) vulnerability in photoboxone SMTP Mail smtp-mail allows Cross...
Unknown
Unreviewed
CVE-2025-62762
was published
Dec 9, 2025
ProTip!
Advisories are also available from the
GraphQL API