GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,049
Erlang
29
GitHub Actions
18
Go
1,871
Maven
5,000+
npm
3,597
NuGet
638
pip
3,198
Pub
10
RubyGems
852
Rust
809
Swift
35
Unreviewed advisories
All unreviewed
5,000+
5,948 advisories
Filter by severity
The Similarity WordPress plugin through 3.0 does not have CSRF check in place when resetting its...
Moderate
Unreviewed
CVE-2024-3971
was published
Jun 14, 2024
The Similarity WordPress plugin through 3.0 does not have CSRF check in some places, and is...
Moderate
Unreviewed
CVE-2024-3972
was published
Jun 14, 2024
IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an...
Moderate
Unreviewed
CVE-2023-38001
was published
Jul 30, 2024
A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform...
Moderate
Unreviewed
CVE-2024-3083
was published
Jul 31, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...
High
Unreviewed
CVE-2024-40332
was published
Jul 10, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...
High
Unreviewed
CVE-2024-40334
was published
Jul 10, 2024
Insecure handling of GET header parameter file included in requests being sent to an instance of...
High
Unreviewed
CVE-2024-3798
was published
Jul 10, 2024
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx)...
Moderate
Unreviewed
CVE-2014-100005
was published
May 17, 2022
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
High
Unreviewed
CVE-2024-35553
was published
May 22, 2024
Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows...
High
Unreviewed
CVE-2023-24048
was published
Dec 5, 2023
Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before...
High
Unreviewed
CVE-2021-29050
was published
Feb 21, 2024
Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...
High
Unreviewed
CVE-2024-23094
was published
Feb 22, 2024
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...
Moderate
Unreviewed
CVE-2024-27559
was published
Mar 1, 2024
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the ...
High
Unreviewed
CVE-2024-27694
was published
Mar 4, 2024
An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information...
Critical
Unreviewed
CVE-2024-33449
was published
Apr 29, 2024
ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.
High
Unreviewed
CVE-2024-38293
was published
Jun 13, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...
Moderate
Unreviewed
CVE-2024-39155
was published
Jun 27, 2024
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...
High
Unreviewed
CVE-2024-39022
was published
Jul 5, 2024
Lime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). The YII_CSRF_TOKEN is...
High
Unreviewed
CVE-2024-39063
was published
Jul 9, 2024
Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross...
High
Unreviewed
CVE-2024-40119
was published
Jul 17, 2024
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via...
Critical
Unreviewed
CVE-2024-41603
was published
Jul 19, 2024
The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows...
Moderate
Unreviewed
CVE-2024-39090
was published
Jul 18, 2024
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote...
High
Unreviewed
CVE-2024-41602
was published
Jul 19, 2024
The wp-affiliate-platform WordPress plugin before 6.5.2 does not have CSRF check in place when...
Moderate
Unreviewed
CVE-2024-5285
was published
Jul 29, 2024
A vulnerability classified as problematic has been found in SourceCodester Tracking Monitoring...
Moderate
Unreviewed
CVE-2024-7360
was published
Aug 1, 2024
ProTip!
Advisories are also available from the
GraphQL API