Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
61
GitHub Actions
50
Go
3,821
Maven
5,000+
npm
5,000+
NuGet
939
pip
5,000+
Pub
13
RubyGems
1,059
Rust
1,357
Swift
54
Unreviewed advisories
All unreviewed
5,000+

125,465 advisories

Loading
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable... High Unreviewed
CVE-2026-8719 was published May 17, 2026
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because... High Unreviewed
CVE-2026-46728 was published May 17, 2026
WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that... High Unreviewed
CVE-2021-47979 was published May 16, 2026
My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the... High Unreviewed
CVE-2021-47971 was published May 16, 2026
Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the... High Unreviewed
CVE-2020-37232 was published May 16, 2026
Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the... High Unreviewed
CVE-2020-37230 was published May 16, 2026
LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to... High Unreviewed
CVE-2021-47954 was published May 16, 2026
Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows... High Unreviewed
CVE-2020-37247 was published May 16, 2026
Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input... High Unreviewed
CVE-2020-37245 was published May 16, 2026
Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows... High Unreviewed
CVE-2021-47942 was published May 16, 2026
Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows... High Unreviewed
CVE-2020-37242 was published May 16, 2026
Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter... High Unreviewed
CVE-2020-37243 was published May 16, 2026
Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated... High Unreviewed
CVE-2020-37244 was published May 16, 2026
VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX... High Unreviewed
CVE-2021-47974 was published May 16, 2026
Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the... High Unreviewed
CVE-2021-47970 was published May 16, 2026
Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to... High Unreviewed
CVE-2021-47973 was published May 16, 2026
Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the... High Unreviewed
CVE-2021-47969 was published May 16, 2026
EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated... High Unreviewed
CVE-2021-47956 was published May 16, 2026
WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory... High Unreviewed
CVE-2021-47977 was published May 16, 2026
TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows... High Unreviewed
CVE-2021-47976 was published May 16, 2026
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows... High Unreviewed
CVE-2021-47972 was published May 16, 2026
Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers... High Unreviewed
CVE-2021-47980 was published May 16, 2026
HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows... High Unreviewed
CVE-2020-37227 was published May 16, 2026
Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service... High Unreviewed
CVE-2020-37231 was published May 16, 2026
OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv... High Unreviewed
CVE-2020-37229 was published May 16, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database