GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,168
Erlang
30
GitHub Actions
19
Go
1,978
Maven
5,000+
npm
3,698
NuGet
656
pip
3,315
Pub
11
RubyGems
882
Rust
832
Swift
35
Unreviewed advisories
All unreviewed
5,000+
983 advisories
Filter by severity
python-fedora vulnerable to an open redirect resulting in loss of CSRF protection
Moderate
CVE-2017-1002150
was published
for
python-fedora
(pip)
Jul 13, 2018
Moderate severity vulnerability that affects org.apache.juddi:juddi-client
Moderate
CVE-2015-5241
was published
for
org.apache.juddi:juddi-client
(Maven)
Oct 16, 2018
Apache Tomcat Open Redirect vulnerability
Moderate
CVE-2018-11784
was published
for
org.apache.tomcat.embed:tomcat-embed-core
(Maven)
Oct 17, 2018
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
Moderate
CVE-2017-7233
was published
for
Django
(pip)
Jan 4, 2019
spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability
Moderate
CVE-2019-3778
was published
for
org.springframework.security.oauth:spring-security-oauth
(Maven)
Mar 14, 2019
Doorkeeper-openid_connect contains Open Redirect
Moderate
CVE-2019-9837
was published
for
doorkeeper-openid_connect
(RubyGems)
Mar 25, 2019
Open Redirect vulnerability in jupyterhub and notebook
Moderate
CVE-2019-10255
was published
for
jupyterhub
(pip)
Apr 2, 2019
Jupyter Notebook open redirect vulnerability
Moderate
CVE-2019-10856
was published
for
notebook
(pip)
Apr 9, 2019
Open Redirect in Spring Security OAuth
Moderate
CVE-2019-11269
was published
for
org.springframework.security.oauth:spring-security-oauth
(Maven)
Jun 13, 2019
URL Redirection to Untrusted Site (Open Redirect) in Ktor
Moderate
CVE-2019-19703
was published
for
io.ktor:ktor-client-core
(Maven)
Feb 12, 2020
Open Redirect in apostrophe
Moderate
GHSA-h97g-4mx7-5p2p
was published
for
apostrophe
(npm)
Sep 3, 2020
Cross-Site Scripting in ternary conditional operator
Moderate
CVE-2020-15241
was published
for
typo3/cms
(Composer)
Oct 8, 2020
Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
High
GHSA-r82c-j4mq-5xfw
was published
for
bitlyshortener
(pip)
Oct 27, 2020
Open redirect in Jupyter Server
Moderate
CVE-2020-26232
was published
for
jupyter-server
(pip)
Nov 24, 2020
Jupyter Server open redirect vulnerability
Moderate
CVE-2020-26275
was published
for
jupyter-server
(pip)
Dec 21, 2020
ProTip!
Advisories are also available from the
GraphQL API