Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

19 advisories

Loading
unstructured: Server-Side Request Forgery in the URL-based partitioning Critical
CVE-2026-71428 was published for unstructured (pip) Sep 3, 2026
hayato1121 Credited to hayato1121
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion ... Critical Unreviewed
CVE-2026-70958 was published Aug 18, 2026
Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction. Critical
CVE-2026-54588 was published for poweradmin/poweradmin (Composer) Jul 28, 2026
mike197312 Credited to mike197312
The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client... Critical Unreviewed
CVE-2026-61451 was published Jul 15, 2026
Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL Critical
CVE-2026-54072 was published for github.com/authorizerdev/authorizer (Go) Jul 10, 2026
morimori-dev Credited to morimori-dev
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized... Critical Unreviewed
CVE-2026-41106 was published Jul 3, 2026
URL redirection to untrusted site ('open redirect') vulnerability in DivvyDrive Information... Critical Unreviewed
CVE-2026-6795 was published May 7, 2026
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized... Critical Unreviewed
CVE-2026-33102 was published Apr 24, 2026
This issue was addressed with improved URL validation. This issue is fixed in macOS Tahoe 26.2,... Critical Unreviewed
CVE-2025-43526 was published Dec 17, 2025
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid... Critical Unreviewed
CVE-2025-55031 was published Aug 19, 2025
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a... Critical Unreviewed
CVE-2025-54145 was published Aug 19, 2025
Vulnerability in Oracle Application Express (component: Strategic Planner Starter App). ... Critical Unreviewed
CVE-2025-50067 was published Jul 15, 2025
General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches Critical
GHSA-vpxm-cr3r-pjp9 was published for org.openmrs.module:addresshierarchy (Maven) Jan 30, 2025
slubwama Credited to slubwama and mseaton mseaton mseaton
Portainer before 2.20.0 allows redirects when the target is not index.yaml. Critical Unreviewed
CVE-2024-33661 was published Apr 26, 2024
Labstack Echo Open Redirect vulnerability Critical
CVE-2022-40083 was published for github.com/labstack/echo/v4 (Go) Sep 29, 2022
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations... Critical Unreviewed
CVE-2019-6741 was published May 24, 2022
A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could... Critical Unreviewed
CVE-2017-8989 was published May 14, 2022
The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable... Critical Unreviewed
CVE-2022-41559 was published Dec 6, 2022
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2... Critical Unreviewed
CVE-2022-28763 was published Nov 1, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database