Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,896
Maven
5,000+
npm
5,000+
NuGet
1,143
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,555
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

59 advisories

Loading
The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect... Low Unreviewed
CVE-2026-88791 was published Sep 30, 2026
A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected... Low Unreviewed
CVE-2026-97325 was published Sep 24, 2026
A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect... Low Unreviewed
CVE-2026-96892 was published Sep 24, 2026
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects... Low Unreviewed
CVE-2026-96773 was published Sep 24, 2026
A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up... Low Unreviewed
CVE-2026-94214 was published Sep 21, 2026
A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer... Low Unreviewed
CVE-2026-94216 was published Sep 21, 2026
A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file ... Low Unreviewed
CVE-2026-94102 was published Sep 21, 2026
An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can... Low Unreviewed
CVE-2023-24034 was published Sep 14, 2026
In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking... Low Unreviewed
CVE-2026-28630 was published Sep 8, 2026
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0... Low Unreviewed
CVE-2026-84389 was published Sep 8, 2026
Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success... Low Unreviewed
CVE-2026-80200 was published Aug 26, 2026
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function... Low Unreviewed
CVE-2026-78145 was published Aug 24, 2026
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene... Low Unreviewed
CVE-2026-66829 was published Aug 6, 2026
A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown... Low Unreviewed
CVE-2026-18721 was published Aug 4, 2026
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows... Low Unreviewed
CVE-2026-67350 was published Jul 31, 2026
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9... Low Unreviewed
CVE-2026-7364 was published Jul 17, 2026
A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to... Low Unreviewed
CVE-2026-14632 was published Jul 4, 2026
A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the... Low Unreviewed
CVE-2026-12804 was published Jun 21, 2026
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The attacker... Low Unreviewed
CVE-2026-48895 was published Jun 19, 2026
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The default... Low Unreviewed
CVE-2026-44915 was published Jun 19, 2026
A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function... Low Unreviewed
CVE-2026-11502 was published Jun 8, 2026
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible Low Unreviewed
CVE-2026-49380 was published May 29, 2026
action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. Low Unreviewed
CVE-2026-48832 was published May 26, 2026
An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in... Low Unreviewed
CVE-2026-21741 was published Apr 14, 2026
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container... Low Unreviewed
CVE-2026-2475 was published Apr 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database