Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,875
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,590
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

968 advisories

Loading
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers... Moderate Unreviewed
CVE-2026-105128 was published Oct 4, 2026
A file-upload handler redirects the authenticated client's browser to a URL taken directly from... Moderate Unreviewed
CVE-2026-90453 was published Sep 12, 2026
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI... Moderate Unreviewed
CVE-2026-39600 was published Oct 2, 2026
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly... Moderate Unreviewed
CVE-2026-97318 was published Oct 2, 2026
URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation... Moderate Unreviewed
CVE-2026-103048 was published Sep 30, 2026
A flaw was found in oauth-proxy. The application fails to properly validate the destination... Moderate Unreviewed
CVE-2026-83589 was published Oct 1, 2026
Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint... Moderate Unreviewed
CVE-2026-53989 was published Sep 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL... Moderate Unreviewed
CVE-2026-73599 was published Sep 29, 2026
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect. Moderate Unreviewed
CVE-2026-76720 was published Sep 29, 2026
Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes... Moderate Unreviewed
CVE-2026-100523 was published Sep 26, 2026
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter... Moderate Unreviewed
CVE-2026-81913 was published Sep 11, 2026
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in... Moderate Unreviewed
CVE-2026-18505 was published Sep 23, 2026
URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co.... Moderate Unreviewed
CVE-2026-80444 was published Sep 23, 2026
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in... Moderate Unreviewed
CVE-2026-95813 was published Sep 22, 2026
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal... Moderate Unreviewed
CVE-2026-83198 was published Sep 15, 2026
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open... Moderate Unreviewed
CVE-2026-7527 was published Sep 19, 2026
Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:... Moderate Unreviewed
CVE-2026-93871 was published Sep 18, 2026
Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function... Moderate Unreviewed
CVE-2026-93869 was published Sep 18, 2026
The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect... Moderate Unreviewed
CVE-2026-86823 was published Sep 16, 2026
Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after... Moderate Unreviewed
CVE-2026-92141 was published Sep 16, 2026
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the... Moderate Unreviewed
CVE-2026-92216 was published Sep 16, 2026
IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an... Moderate Unreviewed
CVE-2026-13277 was published Sep 14, 2026
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an... Moderate Unreviewed
CVE-2026-89307 was published Sep 15, 2026
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross... Moderate Unreviewed
CVE-2025-14524 was published Jan 8, 2026
Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint... Moderate Unreviewed
CVE-2026-91772 was published Sep 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database