Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,428
Maven
5,000+
npm
5,000+
NuGet
1,088
pip
5,000+
Pub
13
RubyGems
1,129
Rust
1,506
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

55 advisories

Loading
The Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments &... Moderate Unreviewed
CVE-2025-11977 was published Jul 10, 2026
The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for... Moderate Unreviewed
CVE-2026-13080 was published Jul 9, 2026
The RTMKit (rometheme-for-elementor) plugin for WordPress is vulnerable to Local File Inclusion... Moderate Unreviewed
CVE-2026-5137 was published Jul 3, 2026
Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows... Moderate Unreviewed
CVE-2019-25760 was published Jun 19, 2026
WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows... Moderate Unreviewed
CVE-2016-20077 was published Jun 15, 2026
WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that... Moderate Unreviewed
CVE-2016-20079 was published Jun 15, 2026
WordPress Plugin Abtest contains a local file inclusion vulnerability that allows unauthenticated... Moderate Unreviewed
CVE-2016-20082 was published Jun 15, 2026
WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows... Moderate Unreviewed
CVE-2016-20078 was published Jun 15, 2026
WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion... Moderate Unreviewed
CVE-2016-20080 was published Jun 15, 2026
WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated... Moderate Unreviewed
CVE-2016-20064 was published Jun 9, 2026
Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability... Moderate Unreviewed
CVE-2018-25324 was published May 17, 2026
ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated... Moderate Unreviewed
CVE-2021-47978 was published May 16, 2026
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated... Moderate Unreviewed
CVE-2020-37246 was published May 16, 2026
WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows... Moderate Unreviewed
CVE-2020-37169 was published May 13, 2026
WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that... Moderate Unreviewed
CVE-2022-50954 was published May 10, 2026
A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11... Moderate Unreviewed
CVE-2026-30480 was published Apr 14, 2026
HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to... Moderate Unreviewed
CVE-2018-25231 was published Mar 30, 2026
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Moderate Unreviewed
CVE-2025-68552 was published Feb 20, 2026
FoF Pretty Mail 1.1.2 contains a local file inclusion vulnerability that allows administrative... Moderate Unreviewed
CVE-2024-58302 was published Dec 12, 2025
An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to... Moderate Unreviewed
CVE-2025-63738 was published Dec 9, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Moderate Unreviewed
CVE-2025-67528 was published Dec 9, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Moderate Unreviewed
CVE-2025-66115 was published Nov 21, 2025
The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24... Moderate Unreviewed
CVE-2025-63888 was published Nov 20, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Moderate Unreviewed
CVE-2025-48338 was published Oct 22, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File... Moderate Unreviewed
CVE-2025-32657 was published Oct 22, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database