Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,428
Maven
5,000+
npm
5,000+
NuGet
1,088
pip
5,000+
Pub
13
RubyGems
1,129
Rust
1,506
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

33,804 advisories

Loading
The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is... Moderate Unreviewed
CVE-2026-15425 was published Jul 25, 2026
Milkdown before 7.21.3 contains a DOM cross-site scripting vulnerability in the @milkdown/plugin... Moderate Unreviewed
CVE-2026-57531 was published Jul 24, 2026
Milkdown before 7.21.3 contains a stored cross-site scripting vulnerability in the @milkdown... Moderate Unreviewed
CVE-2026-57530 was published Jul 24, 2026
Improper neutralization of input during web page generation ('cross-site scripting')... Moderate Unreviewed
CVE-2026-8308 was published Jul 24, 2026
DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed... Moderate Unreviewed
CVE-2026-66010 was published Jul 24, 2026
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross... Moderate Unreviewed
CVE-2026-15346 was published Jul 24, 2026
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored... Moderate Unreviewed
CVE-2026-15821 was published Jul 24, 2026
The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2026-15739 was published Jul 24, 2026
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks &... Moderate Unreviewed
CVE-2026-15334 was published Jul 24, 2026
The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks &... Moderate Unreviewed
CVE-2026-15333 was published Jul 24, 2026
The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable... Moderate Unreviewed
CVE-2026-15665 was published Jul 24, 2026
The Visualizer – Tables & Charts Manager with Built-in AI Generator plugin for WordPress is... Moderate Unreviewed
CVE-2026-15653 was published Jul 24, 2026
The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... Moderate Unreviewed
CVE-2026-15648 was published Jul 24, 2026
The WP Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... Moderate Unreviewed
CVE-2026-15464 was published Jul 24, 2026
The Open User Map – Interactive Leaflet Maps plugin for WordPress is vulnerable to Stored Cross... Moderate Unreviewed
CVE-2026-15755 was published Jul 24, 2026
The Firelight Lightbox plugin for WordPress is vulnerable to Stored DOM Cross-Site Scripting in... Moderate Unreviewed
CVE-2026-6454 was published Jul 24, 2026
The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2026-15100 was published Jul 24, 2026
The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up... Moderate Unreviewed
CVE-2025-9205 was published Jul 24, 2026
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 - Improper... Moderate Unreviewed
CVE-2026-65763 was published Jul 23, 2026
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 -... Moderate Unreviewed
CVE-2026-65762 was published Jul 23, 2026
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics... Moderate Unreviewed
CVE-2026-65697 was published Jul 23, 2026
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Retention... Moderate Unreviewed
CVE-2026-48531 was published Jul 23, 2026
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server... Moderate Unreviewed
CVE-2026-48534 was published Jul 23, 2026
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default... Moderate Unreviewed
CVE-2026-48538 was published Jul 23, 2026
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the... Moderate Unreviewed
CVE-2026-48530 was published Jul 23, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database