Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,870
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,126
NuGet
735
pip
3,943
Pub
12
RubyGems
945
Rust
1,021
Swift
39
Unreviewed advisories
All unreviewed
5,000+

32,143 advisories

Loading
A flaw has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part... Moderate Unreviewed
CVE-2025-9923 was published Sep 8, 2025
A vulnerability has been found in code-projects Fruit Shop Management System 1.0. Affected by... Moderate Unreviewed
CVE-2025-9845 was published Sep 8, 2025
Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inventory Management System,... Moderate Unreviewed
CVE-2025-40641 was published Sep 8, 2025
Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to... Moderate Unreviewed
CVE-2025-40642 was published Sep 8, 2025
'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function ... Moderate Unreviewed
CVE-2014-125128 was published Sep 8, 2025
sanitize-html is vulnerable to XSS through incomprehensive sanitization Moderate
CVE-2019-25225 was published for sanitize-html (npm) Sep 8, 2025
A vulnerability was detected in SourceCodester Time Tracker 1.0. The affected element is an... Moderate Unreviewed
CVE-2025-10088 was published Sep 8, 2025
A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an... Moderate Unreviewed
CVE-2025-10074 was published Sep 8, 2025
A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted... Moderate Unreviewed
CVE-2025-10075 was published Sep 8, 2025
A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This issue... Moderate Unreviewed
CVE-2025-10064 was published Sep 7, 2025
A weakness has been identified in itsourcecode POS Point of Sale System 1.0. Impacted is an... Moderate Unreviewed
CVE-2025-10065 was published Sep 7, 2025
A security vulnerability has been detected in itsourcecode POS Point of Sale System 1.0. The... Moderate Unreviewed
CVE-2025-10066 was published Sep 7, 2025
A vulnerability was detected in itsourcecode POS Point of Sale System 1.0. The impacted element... Moderate Unreviewed
CVE-2025-10067 was published Sep 7, 2025
A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This vulnerability... Moderate Unreviewed
CVE-2025-10063 was published Sep 7, 2025
A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. The affected... Moderate Unreviewed
CVE-2025-10032 was published Sep 6, 2025
A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This affects an... Moderate Unreviewed
CVE-2025-10028 was published Sep 6, 2025
A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This... Moderate Unreviewed
CVE-2025-10029 was published Sep 6, 2025
The Content Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2025-8722 was published Sep 6, 2025
The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting... Moderate Unreviewed
CVE-2025-8564 was published Sep 6, 2025
The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2025-8149 was published Sep 6, 2025
The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2025-6757 was published Sep 6, 2025
The Smart Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... Moderate Unreviewed
CVE-2025-9126 was published Sep 6, 2025
The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2025-9442 was published Sep 6, 2025
The Admin Menu Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... Moderate Unreviewed
CVE-2025-9493 was published Sep 6, 2025
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site... Moderate Unreviewed
CVE-2025-8360 was published Sep 6, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database