Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

91 advisories

Loading
Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter Low
CVE-2026-42350 was published for github.com/akuity/kargo (Go) Aug 27, 2026
PontusHanssen Credited to PontusHanssen, krancour, and rpelczar krancour krancour
rpelczar rpelczar
Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success... Low Unreviewed
CVE-2026-80200 was published Aug 26, 2026
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function... Low Unreviewed
CVE-2026-78145 was published Aug 24, 2026
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene... Low Unreviewed
CVE-2026-66829 was published Aug 6, 2026
A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown... Low Unreviewed
CVE-2026-18721 was published Aug 4, 2026
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows... Low Unreviewed
CVE-2026-67350 was published Jul 31, 2026
datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas Low
CVE-2026-55403 was published for datamodel-code-generator (pip) Jul 28, 2026
thegr1ffyn Credited to thegr1ffyn
@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect Low
CVE-2026-59730 was published for @astrojs/node (npm) Jul 20, 2026
iaohkut-from-NightWolf-Team Credited to iaohkut-from-NightWolf-Team
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9... Low Unreviewed
CVE-2026-7364 was published Jul 17, 2026
Waku has an Open Redirect via `unstable_redirect` Helper Low
CVE-2026-49456 was published for waku (npm) Jul 8, 2026
j0hndo Credited to j0hndo
A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to... Low Unreviewed
CVE-2026-14632 was published Jul 4, 2026
Concourse login flow has an open redirect issue Low
CVE-2026-49826 was published for github.com/concourse/concourse (Go) Jul 1, 2026
Fushuling Credited to Fushuling and RacerZ-fighting RacerZ-fighting RacerZ-fighting
A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the... Low Unreviewed
CVE-2026-12804 was published Jun 21, 2026
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The attacker... Low Unreviewed
CVE-2026-48895 was published Jun 19, 2026
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX. The default... Low Unreviewed
CVE-2026-44915 was published Jun 19, 2026
A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function... Low Unreviewed
CVE-2026-11502 was published Jun 8, 2026
hsweb-framework has an open redirect issue Low
CVE-2026-11477 was published for org.hswebframework.web:hsweb-authorization-oauth2 (Maven) Jun 8, 2026
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible Low Unreviewed
CVE-2026-49380 was published May 29, 2026
Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login Low
CVE-2026-48589 was published for org.apache.shiro:shiro-jakarta-ee (Maven) May 26, 2026
yeikel Credited to yeikel
action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. Low Unreviewed
CVE-2026-48832 was published May 26, 2026
Unauthenticated Open Redirect, Arbitrary HTTP Response Header Injection, Missing CSRF, and Invisible-Mode Bypass in goshs `/?redirect` endpoint Low
GHSA-7qx6-f23w-3w7f was published for github.com/patrickhener/goshs (Go) Apr 14, 2026
wooseokdotkim Credited to wooseokdotkim
An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in... Low Unreviewed
CVE-2026-21741 was published Apr 14, 2026
Kimai has an Open Redirect via Unvalidated RelayState in SAML ACS Handler Low
GHSA-3jp4-mhh4-gcgr was published for kimai/kimai (Composer) Apr 14, 2026
morimori-dev Credited to morimori-dev
Casdoor vulnerable to Open Redirect Low
CVE-2026-5467 was published for github.com/casdoor/casdoor (Go) Apr 3, 2026
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container... Low Unreviewed
CVE-2026-2475 was published Apr 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database