GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
101
GitHub Actions
54
Go
4,316
Maven
5,000+
npm
5,000+
NuGet
1,030
pip
5,000+
Pub
13
RubyGems
1,116
Rust
1,493
Swift
61
Unreviewed advisories
All unreviewed
5,000+
1,074 advisories
Filter by severity
Improper file handling in concrete5/core
High
CVE-2021-22968
was published
for
concrete5/core
(Composer)
Nov 23, 2021
An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local...
High
Unreviewed
CVE-2022-44786
was published
Nov 22, 2022
AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion...
High
Unreviewed
CVE-2023-24217
was published
Mar 7, 2023
PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.
High
Unreviewed
CVE-2023-2551
was published
May 5, 2023
The wpForo Forum plugin for WordPress is vulnerable to Local File Include, Server-Side Request...
High
Unreviewed
CVE-2023-2249
was published
Jun 9, 2023
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
High
CVE-2023-40033
was published
for
flarum/core
(Composer)
Aug 16, 2023
FUXA local file inclusion vulnerability
High
CVE-2023-31718
was published
for
fuxa-server
(npm)
Sep 22, 2023
FUXA vulnerable to Local File Inclusion
High
CVE-2023-31716
was published
for
@frangoteam/fuxa
(npm)
Sep 22, 2023
The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and...
High
Unreviewed
CVE-2023-5250
was published
Oct 30, 2023
The PHP to Page plugin for WordPress is vulnerable Local File Inclusion to Remote Code Execution...
High
Unreviewed
CVE-2023-5199
was published
Oct 30, 2023
The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in...
High
Unreviewed
CVE-2023-5099
was published
Oct 31, 2023
The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog...
High
Unreviewed
CVE-2023-5815
was published
Nov 22, 2023
A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a...
High
Unreviewed
CVE-2023-52325
was published
Jan 23, 2024
The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all...
High
Unreviewed
CVE-2024-1382
was published
Mar 7, 2024
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to...
High
Unreviewed
CVE-2024-3061
was published
Mar 29, 2024
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in...
High
Unreviewed
CVE-2024-2047
was published
Mar 30, 2024
The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up...
High
Unreviewed
CVE-2024-3500
was published
May 2, 2024
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in...
High
Unreviewed
CVE-2024-3499
was published
May 2, 2024
The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File Inclusion in all...
High
Unreviewed
CVE-2024-3849
was published
May 2, 2024
The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all...
High
Unreviewed
CVE-2024-3809
was published
May 14, 2024
The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and...
High
Unreviewed
CVE-2024-3807
was published
May 14, 2024
The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all...
High
Unreviewed
CVE-2024-3808
was published
May 14, 2024
The XML Sitemap & Google News plugin for WordPress is vulnerable to Local File Inclusion in all...
High
Unreviewed
CVE-2024-4441
was published
May 14, 2024
The All-in-One Video Gallery plugin for WordPress is vulnerable to Local File Inclusion in all...
High
Unreviewed
CVE-2024-4670
was published
May 15, 2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...
High
Unreviewed
CVE-2024-32523
was published
May 17, 2024
ProTip!
Advisories are also available from the
GraphQL API