GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,249
Erlang
31
GitHub Actions
21
Go
2,018
Maven
5,000+
npm
3,723
NuGet
662
pip
3,400
Pub
11
RubyGems
890
Rust
857
Swift
36
Unreviewed advisories
All unreviewed
5,000+
73 advisories
Filter by severity
rdiffweb vulnerable to Open Redirect
Moderate
CVE-2022-3438
was published
for
rdiffweb
(pip)
Oct 10, 2022
Authorization Header forwarded on redirect
Moderate
CVE-2018-25091
was published
for
urllib3
(pip)
Oct 15, 2023
Flask-AppBuilder Open Redirect vulnerability
Moderate
CVE-2021-32805
was published
for
Flask-AppBuilder
(pip)
Sep 8, 2021
Unsafe handling of user-specified cookies in treq
High
CVE-2022-23607
was published
for
treq
(pip)
Feb 1, 2022
rdiffweb Open Redirect vulnerability
Moderate
CVE-2022-4644
was published
for
rdiffweb
(pip)
Dec 22, 2022
rdiffweb vulnerable to Open Redirect
High
CVE-2022-4720
was published
for
rdiffweb
(pip)
Dec 27, 2022
python-fedora vulnerable to an open redirect resulting in loss of CSRF protection
Moderate
CVE-2017-1002150
was published
for
python-fedora
(pip)
Jul 13, 2018
Forwarding of confidentials headers to third parties in fluture-node
Low
CVE-2022-24719
was published
for
fluture-node
(npm)
Mar 1, 2022
Cross-site Scripting and Open Redirect in Products.ATContentTypes
Moderate
CVE-2022-23599
was published
for
Products.ATContentTypes
(pip)
Jan 28, 2022
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
High
CVE-2021-32806
was published
for
Products.isurlinportal
(pip)
Aug 5, 2021
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
Moderate
CVE-2021-21337
was published
for
Products.PluggableAuthService
(pip)
Mar 8, 2021
Plone Multiple open redirect vulnerabilities
Low
CVE-2013-4195
was published
for
plone
(pip)
May 17, 2022
Products.CMFPlone Open Redirect Vulnerability
Moderate
CVE-2017-1000481
was published
for
Plone
(pip)
May 14, 2022
Plone Open Redirection vulnerability via next parameter
High
CVE-2013-4200
was published
for
Plone
(pip)
May 14, 2022
OMERO webclient does not validate URL redirects on login or switching group.
Moderate
CVE-2021-21377
was published
for
omero-web
(pip)
Mar 23, 2021
OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI
Moderate
CVE-2022-36087
was published
for
oauthlib
(pip)
Sep 16, 2022
Open redirect via transitional IPv6 addresses on dual-stack networks
High
CVE-2021-21392
was published
for
matrix-synapse
(pip)
Apr 13, 2021
Jupyter Notebook open redirect vulnerability
Moderate
CVE-2019-10856
was published
for
notebook
(pip)
Apr 9, 2019
ProTip!
Advisories are also available from the
GraphQL API