Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,863
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,158
Rust
1,586
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

1,610 advisories

Loading
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI... Moderate Unreviewed
CVE-2026-39600 was published Oct 2, 2026
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly... Moderate Unreviewed
CVE-2026-97318 was published Oct 2, 2026
A flaw was found in oauth-proxy. The application fails to properly validate the destination... Moderate Unreviewed
CVE-2026-83589 was published Oct 1, 2026
Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF High
CVE-2026-101907 was published for axios (npm) Sep 30, 2026
mcdubhghlas Credited to mcdubhghlas
The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect... Low Unreviewed
CVE-2026-88791 was published Sep 30, 2026
URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation... Moderate Unreviewed
CVE-2026-103048 was published Sep 30, 2026
Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint... Moderate Unreviewed
CVE-2026-53989 was published Sep 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL... Moderate Unreviewed
CVE-2026-73599 was published Sep 29, 2026
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect. Moderate Unreviewed
CVE-2026-76720 was published Sep 29, 2026
Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the... Critical Unreviewed
CVE-2026-101090 was published Sep 27, 2026
Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes... Moderate Unreviewed
CVE-2026-100523 was published Sep 26, 2026
A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected... Low Unreviewed
CVE-2026-97325 was published Sep 24, 2026
A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect... Low Unreviewed
CVE-2026-96892 was published Sep 24, 2026
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects... Low Unreviewed
CVE-2026-96773 was published Sep 24, 2026
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in... Moderate Unreviewed
CVE-2026-18505 was published Sep 23, 2026
URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co.... Moderate Unreviewed
CVE-2026-80444 was published Sep 23, 2026
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in... Moderate Unreviewed
CVE-2026-95813 was published Sep 22, 2026
A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up... Low Unreviewed
CVE-2026-94214 was published Sep 21, 2026
A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer... Low Unreviewed
CVE-2026-94216 was published Sep 21, 2026
A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file ... Low Unreviewed
CVE-2026-94102 was published Sep 21, 2026
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open... Moderate Unreviewed
CVE-2026-7527 was published Sep 19, 2026
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function... Moderate Unreviewed
CVE-2026-93869 was published Sep 18, 2026
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:... Moderate Unreviewed
CVE-2026-93871 was published Sep 18, 2026
Semantic MediaWiki has an open redirect in Special:URIResolver Moderate
CVE-2026-77609 was published for mediawiki/semantic-media-wiki (Composer) Sep 18, 2026
krabina Credited to krabina
Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after... Moderate Unreviewed
CVE-2026-92141 was published Sep 16, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database