GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,051
Erlang
29
GitHub Actions
19
Go
1,887
Maven
5,000+
npm
3,602
NuGet
638
pip
3,205
Pub
10
RubyGems
852
Rust
816
Swift
35
Unreviewed advisories
All unreviewed
5,000+
5,956 advisories
Filter by severity
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...
Moderate
Unreviewed
CVE-2024-34957
was published
May 16, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...
Moderate
Unreviewed
CVE-2024-34958
was published
May 16, 2024
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal...
Unknown
Unreviewed
CVE-2024-35039
was published
May 16, 2024
Cross-Site Request Forgery (CSRF) vulnerability in WP Hive Events Rich Snippets for Google allows...
High
Unreviewed
CVE-2023-44478
was published
May 17, 2024
Cross-Site Request Forgery (CSRF) vulnerability in WP Automatic Automatic allows Privilege...
High
Unreviewed
CVE-2024-27955
was published
May 17, 2024
Cross-Site Request Forgery (CSRF) vulnerability in CodeBard Fast Custom Social Share by CodeBard...
Moderate
Unreviewed
CVE-2024-34807
was published
May 17, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Creative Motion Clearfy Cache.This issue...
Moderate
Unreviewed
CVE-2024-34806
was published
May 17, 2024
Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes EmpowerWP.This issue affects...
Moderate
Unreviewed
CVE-2024-34809
was published
May 17, 2024
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and...
Moderate
Unreviewed
CVE-2024-34755
was published
May 17, 2024
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7...
Moderate
Unreviewed
CVE-2024-34756
was published
May 17, 2024
Cross-Site Request Forgery (CSRF) on Session Token vulnerability that could potentially lead to...
Moderate
Unreviewed
CVE-2024-23554
was published
May 18, 2024
A vulnerability, which was classified as problematic, was found in SourceCodester Simple...
Moderate
Unreviewed
CVE-2024-5097
was published
May 19, 2024
Syslifters SysReptor before 2024.40 has a CSRF vulnerability for WebSocket connections.
High
Unreviewed
CVE-2024-36076
was published
May 19, 2024
Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
Moderate
CVE-2024-1727
was published
for
gradio
(pip)
May 21, 2024
sensiolabs/connect has a Cross-Site Request Forgery Vulnerability
Moderate
GHSA-6wqp-7g94-f69j
was published
for
sensiolabs/connect
(Composer)
May 21, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
High
Unreviewed
CVE-2024-35553
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Unknown
Unreviewed
CVE-2024-35554
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Moderate
Unreviewed
CVE-2024-35555
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
High
Unreviewed
CVE-2024-35556
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Moderate
Unreviewed
CVE-2024-35557
was published
May 22, 2024
A Cross-Site Request Forgery (CSRF) vulnerability was discovered in OpenKM Community Edition on...
Moderate
Unreviewed
CVE-2024-35475
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Unknown
Unreviewed
CVE-2024-35551
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
High
Unreviewed
CVE-2024-35559
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Unknown
Unreviewed
CVE-2024-35560
was published
May 22, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Moderate
Unreviewed
CVE-2024-35561
was published
May 22, 2024
ProTip!
Advisories are also available from the
GraphQL API