GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,466
Erlang
33
GitHub Actions
23
Go
2,167
Maven
5,000+
npm
3,830
NuGet
696
pip
3,508
Pub
12
RubyGems
910
Rust
906
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
939 advisories
Filter by severity
Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit...
Critical
Unreviewed
CVE-2025-28915
was published
Mar 11, 2025
An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of...
Critical
Unreviewed
CVE-2025-25361
was published
Mar 6, 2025
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS...
Critical
Unreviewed
CVE-2025-25790
was published
Mar 5, 2025
An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2...
Critical
Unreviewed
CVE-2025-25784
was published
Mar 5, 2025
An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3...
Critical
Unreviewed
CVE-2025-25783
was published
Mar 5, 2025
The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads...
Critical
Unreviewed
CVE-2024-8425
was published
Feb 28, 2025
ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php.
Critical
Unreviewed
CVE-2025-26325
was published
Feb 28, 2025
The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress...
Critical
Unreviewed
CVE-2025-1128
was published
Feb 25, 2025
Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file...
Critical
Unreviewed
CVE-2024-56897
was published
Feb 24, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload...
Critical
Unreviewed
CVE-2025-26776
was published
Feb 22, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in kodeshpa Simplified allows Using...
Critical
Unreviewed
CVE-2025-22654
was published
Feb 18, 2025
The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to...
Critical
Unreviewed
CVE-2024-10960
was published
Feb 12, 2025
The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file...
Critical
Unreviewed
CVE-2024-13365
was published
Feb 12, 2025
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to...
Critical
Unreviewed
CVE-2024-13011
was published
Feb 10, 2025
In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload...
Critical
Unreviewed
CVE-2024-57668
was published
Feb 6, 2025
OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for...
Critical
Unreviewed
CVE-2025-1066
was published
Feb 6, 2025
Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to...
Critical
Unreviewed
CVE-2024-57968
was published
Feb 3, 2025
ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.
Critical
Unreviewed
CVE-2024-57450
was published
Feb 3, 2025
The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing...
Critical
Unreviewed
CVE-2024-13448
was published
Jan 28, 2025
The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient...
Critical
Unreviewed
CVE-2025-0357
was published
Jan 25, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic allows Upload a...
Critical
Unreviewed
CVE-2025-24650
was published
Jan 24, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Multi Uploader for...
Critical
Unreviewed
CVE-2025-23921
was published
Jan 22, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in Innovative Solutions user files...
Critical
Unreviewed
CVE-2025-23953
was published
Jan 22, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows...
Critical
Unreviewed
CVE-2025-23942
was published
Jan 22, 2025
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Smallerik File Browser...
Critical
Unreviewed
CVE-2025-23918
was published
Jan 22, 2025
ProTip!
Advisories are also available from the
GraphQL API