Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,237
Erlang
31
GitHub Actions
20
Go
2,000
Maven
5,000+
npm
3,711
NuGet
661
pip
3,383
Pub
11
RubyGems
885
Rust
849
Swift
36
Unreviewed advisories
All unreviewed
5,000+

3,360 advisories

Loading
Cross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink... Moderate Unreviewed
CVE-2024-28731 was published Nov 13, 2024
Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability. This... Moderate Unreviewed
CVE-2024-9665 was published Nov 22, 2024
Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting... Moderate Unreviewed
CVE-2024-39639 was published Nov 1, 2024
Plone Cross-site request forgery (CSRF) Moderate
CVE-2008-0164 was published for Plone (pip) May 1, 2022
Cross-Site Request Forgery in modoboa Moderate
CVE-2023-0438 was published for modoboa (pip) Jan 23, 2023
Cross-Site Request Forgery in modoboa Moderate
CVE-2023-0406 was published for modoboa (pip) Jan 19, 2023
Modoboa is vulnerable to Cross-Site Request Forgery Moderate
CVE-2023-0398 was published for modoboa (pip) Jan 19, 2023
Apache Airflow Cross-Site Request Forgery vulnerability Moderate
CVE-2023-49920 was published for apache-airflow (pip) Dec 21, 2023
Cross-Site Request Forgery (CSRF) vulnerability in Veribo, Roland Murg WP Simple Booking Calendar... Moderate Unreviewed
CVE-2023-51525 was published Mar 15, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <... Moderate Unreviewed
CVE-2022-40128 was published Nov 9, 2022
Cross-Site Request Forgery (CSRF) vulnerability in W3speedster W3SPEEDSTER.This issue affects... Moderate Unreviewed
CVE-2024-52392 was published Nov 20, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Vivwebs Dynamic Widgets.This issue affects... Moderate Unreviewed
CVE-2024-51669 was published Nov 20, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Creative Motion Disable Admin Notices... Moderate Unreviewed
CVE-2024-52420 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute... Moderate Unreviewed
CVE-2022-47424 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls... Moderate Unreviewed
CVE-2024-43338 was published Nov 19, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Deepak Khokhar, Surender Khokhar Manage User... Moderate Unreviewed
CVE-2024-51686 was published Nov 19, 2024
CSRF leading to delete account in wallabag/wallabag Moderate
CVE-2023-0737 was published for wallabag/wallabag (Composer) Nov 15, 2024
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ... Moderate Unreviewed
CVE-2024-51156 was published Nov 15, 2024
SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery (CSRF) via the Socifi... Moderate Unreviewed
CVE-2021-27701 was published Nov 13, 2024
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component... Moderate Unreviewed
CVE-2024-51157 was published Nov 8, 2024
Cross-Site Request Forgery in Anchor CMS Moderate
CVE-2024-29338 was published for anchorcms/anchor-cms (Composer) Mar 22, 2024
The 404 Error Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... Moderate Unreviewed
CVE-2024-11118 was published Nov 16, 2024
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is... Moderate Unreviewed
CVE-2024-6628 was published Nov 16, 2024
VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF) Moderate Unreviewed
CVE-2024-47914 was published Nov 14, 2024
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Cross-Site Request... Moderate Unreviewed
CVE-2024-11143 was published Nov 13, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database