Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,632
Erlang
34
GitHub Actions
25
Go
2,228
Maven
5,000+
npm
3,895
NuGet
701
pip
3,661
Pub
12
RubyGems
914
Rust
943
Swift
38
Unreviewed advisories
All unreviewed
5,000+

770 advisories

Loading
Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is... High Unreviewed
CVE-2025-31932 was published Apr 11, 2025
Deserialization of Untrusted Data vulnerability in PickPlugins Accordion allows Object Injection.... High Unreviewed
CVE-2025-32143 was published Apr 11, 2025
Deserialization of Untrusted Data vulnerability in PickPlugins Job Board Manager allows Object... High Unreviewed
CVE-2025-32144 was published Apr 11, 2025
Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently allows Object... High Unreviewed
CVE-2025-32145 was published Apr 10, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of... High Unreviewed
CVE-2025-30285 was published Apr 8, 2025
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of... High Unreviewed
CVE-2025-30284 was published Apr 8, 2025
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to... High Unreviewed
CVE-2025-29793 was published Apr 8, 2025
The IntelliSpace portal application utilizes .NET Remoting for its functionality. The... High Unreviewed
CVE-2025-3425 was published Apr 7, 2025
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of... High Unreviewed
CVE-2025-31175 was published Apr 7, 2025
Deserialization of Untrusted Data vulnerability in PickPlugins Testimonial Slider allows Object... High Unreviewed
CVE-2025-30889 was published Apr 3, 2025
Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly allows Object... High Unreviewed
CVE-2025-30892 was published Apr 1, 2025
jooby-pac4j: deserialization of untrusted data High
CVE-2025-31129 was published for io.jooby:jooby-pac4j (Maven) Apr 1, 2025
cwm1123
Deserialization of Untrusted Data vulnerability in MDJM MDJM Event Management allows Object... High Unreviewed
CVE-2025-31074 was published Apr 1, 2025
Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted... High Unreviewed
CVE-2025-31103 was published Mar 31, 2025
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to... High Unreviewed
CVE-2025-2485 was published Mar 28, 2025
Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress allows Object... High Unreviewed
CVE-2025-30773 was published Mar 27, 2025
The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress... High Unreviewed
CVE-2025-1913 was published Mar 26, 2025
The WordPress Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions... High Unreviewed
CVE-2024-13889 was published Mar 26, 2025
The Export and Import Users and Customers plugin for WordPress is vulnerable to PHP Object... High Unreviewed
CVE-2025-1971 was published Mar 22, 2025
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP... High Unreviewed
CVE-2025-0724 was published Mar 22, 2025
Redlib allows a Denial of Service via DEFLATE Decompression Bomb in restore_preferences Form High
CVE-2025-30160 was published for redlib (Rust) Mar 21, 2025
Tokarak
The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to PHP Object... High Unreviewed
CVE-2024-13921 was published Mar 20, 2025
A pickle deserialization vulnerability exists in the Latex English error correction plug-in... High Unreviewed
CVE-2024-11039 was published Mar 20, 2025
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager... High Unreviewed
CVE-2025-26921 was published Mar 16, 2025
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to PHP Object Injection... High Unreviewed
CVE-2024-10942 was published Mar 13, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database