Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,161
Rust
1,596
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

1,630 advisories

Loading
Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool... Moderate Unreviewed
CVE-2026-111385 was published Oct 16, 2026
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect... Moderate Unreviewed
CVE-2026-72528 was published Oct 15, 2026
Apprise forwards configured auth headers across cross-origin HTTP redirects Low
CVE-2026-59180 was published for apprise (pip) Oct 14, 2026
gistrec Credited to gistrec
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD... Moderate Unreviewed
CVE-2026-83646 was published Oct 13, 2026
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized... Moderate Unreviewed
CVE-2026-83500 was published Oct 13, 2026
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD... Moderate Unreviewed
CVE-2026-103576 was published Oct 13, 2026
A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the... Low Unreviewed
CVE-2026-109160 was published Oct 13, 2026
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8,... Moderate Unreviewed
CVE-2026-7767 was published Oct 13, 2026
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal... Moderate Unreviewed
CVE-2026-89122 was published Oct 13, 2026
OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura:... Unknown Unreviewed
CVE-2026-92116 was published Oct 12, 2026
HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py... Moderate Unreviewed
CVE-2024-58389 was published Oct 12, 2026
TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment Critical
CVE-2026-108261 was published for @tinacms/app (npm) Oct 9, 2026
sondt99 Credited to sondt99
Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL... Moderate Unreviewed
CVE-2026-79650 was published Oct 9, 2026
AdonisJS: Unencoded route parameters can produce open redirects Moderate
CVE-2026-107718 was published for @adonisjs/http-server (npm) Oct 8, 2026
iaohkut-from-NightWolf-Team Credited to iaohkut-from-NightWolf-Team
Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote,... High Unreviewed
CVE-2026-101152 was published Oct 6, 2026
Insufficient validation of request in login flow could allow a remote, unauthenticated attacker... Moderate Unreviewed
CVE-2026-101151 was published Oct 6, 2026
Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker... Moderate Unreviewed
CVE-2026-106322 was published Oct 6, 2026
Payload: Untrusted redirect URL parameter exploit Moderate
CVE-2026-105846 was published for @payloadcms/next (npm) Oct 6, 2026
kullai-secasure Credited to kullai-secasure and yuvraj-secasure yuvraj-secasure yuvraj-secasure
An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue... Moderate Unreviewed
CVE-2026-80327 was published Oct 6, 2026
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers... Moderate Unreviewed
CVE-2026-105128 was published Oct 4, 2026
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI... Moderate Unreviewed
CVE-2026-39600 was published Oct 2, 2026
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly... Moderate Unreviewed
CVE-2026-97318 was published Oct 2, 2026
A flaw was found in oauth-proxy. The application fails to properly validate the destination... Moderate Unreviewed
CVE-2026-83589 was published Oct 1, 2026
Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF High
CVE-2026-101907 was published for axios (npm) Sep 30, 2026
mcdubhghlas Credited to mcdubhghlas
The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect... Low Unreviewed
CVE-2026-88791 was published Sep 30, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database