GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,407
Maven
5,000+
npm
5,000+
NuGet
1,048
pip
5,000+
Pub
13
RubyGems
1,127
Rust
1,498
Swift
61
Unreviewed advisories
All unreviewed
5,000+
4,084 advisories
Filter by severity
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions.
High
Unreviewed
CVE-2026-57361
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions.
High
Unreviewed
CVE-2026-57362
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.
High
Unreviewed
CVE-2026-57675
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions.
High
Unreviewed
CVE-2026-57366
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions.
High
Unreviewed
CVE-2026-57426
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions.
High
Unreviewed
CVE-2026-57359
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions.
High
Unreviewed
CVE-2026-57671
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions.
High
Unreviewed
CVE-2026-57674
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions.
High
Unreviewed
CVE-2026-57349
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.
High
Unreviewed
CVE-2026-57360
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions.
High
Unreviewed
CVE-2026-57670
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPress <= 5.2 versions.
High
Unreviewed
CVE-2026-27402
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.
High
Unreviewed
CVE-2026-27404
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versions.
High
Unreviewed
CVE-2026-27425
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions.
High
Unreviewed
CVE-2026-57344
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business <= 13.3.3 versions.
High
Unreviewed
CVE-2026-27426
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions.
High
Unreviewed
CVE-2026-57345
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 versions.
High
Unreviewed
CVE-2026-27430
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in NativeChurch <= 4.8.8.2 versions.
High
Unreviewed
CVE-2026-27408
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions.
High
Unreviewed
CVE-2026-57343
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon WordPress Theme <= 6.7 versions.
High
Unreviewed
CVE-2025-69154
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Artale | Wedding Photography WordPress <= 2.2.2...
High
Unreviewed
CVE-2025-69152
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Fitness Zone WordPress Theme <= 5.7 versions.
High
Unreviewed
CVE-2025-69155
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Trendy Travel <= 6.7 versions.
High
Unreviewed
CVE-2025-69153
was published
Jul 2, 2026
Unauthenticated Cross Site Scripting (XSS) in Kids Zone - Children WordPress Theme <= 5.4 versions.
High
Unreviewed
CVE-2025-69156
was published
Jul 2, 2026
ProTip!
Advisories are also available from the
GraphQL API