Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
38
Go
2,758
Maven
5,000+
npm
4,364
NuGet
766
pip
4,132
Pub
12
RubyGems
961
Rust
1,070
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,077 advisories

Loading
AVideo versions prior to 20.0 contain an open redirect vulnerability caused by insufficient... Moderate Unreviewed
CVE-2025-34440 was published Dec 17, 2025
AVideo versions prior to 20.0 are vulnerable to an open redirect flaw due to missing validation... Moderate Unreviewed
CVE-2025-34439 was published Dec 17, 2025
Miniflux has an Open Redirect via protocol-relative redirect_url Moderate
CVE-2025-67713 was published for miniflux.app/v2 (Go) Dec 10, 2025
satoki
Credited to satoki
ABP Account Module has an Open Redirect through Improper validation in its register function Moderate
CVE-2025-65581 was published for Volo.Abp.Account.Web (NuGet) Dec 16, 2025
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist... Moderate Unreviewed
CVE-2025-64250 was published Dec 16, 2025
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows... Moderate Unreviewed
CVE-2025-34504 was published Dec 12, 2025
The Solutions Ad Manager plugin for WordPress is vulnerable to Open Redirect in all versions up... Moderate Unreviewed
CVE-2025-14451 was published Dec 13, 2025
Open Redirect Vulnerability in Taguette Moderate
CVE-2025-67502 was published for taguette (pip) Dec 9, 2025
yueyueL
Credited to yueyueL
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls... Moderate Unreviewed
CVE-2025-67585 was published Dec 9, 2025
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms... Moderate Unreviewed
CVE-2025-67587 was published Dec 9, 2025
Central Dogma's Login Function Has an Open Redirect Vulnerability Moderate
CVE-2025-11222 was published for com.linecorp.centraldogma:centraldogma-server-auth-shiro (Maven) Dec 4, 2025
minwoox
Credited to minwoox
Open redirect in the web server component of MiR Robot and Fleet software allows a remote... Moderate Unreviewed
CVE-2025-13819 was published Dec 1, 2025
Astros's duplicate trailing slash feature leads to an open redirection security issue Moderate
CVE-2025-54793 was published for astro (npm) Aug 7, 2025
ghiyastfarisi ascorbic
ematipico
Credited to ghiyastfarisi, ascorbic, and ematipico
Traefik's X-Forwarded-Prefix Header still allows for Open Redirect Moderate
CVE-2024-52003 was published for github.com/traefik/traefik/v2 (Go) Dec 2, 2024
kunte0
Credited to kunte0
Backdrop CMS Host Header Injection vulnerability Moderate
CVE-2025-63828 was published for backdrop/backdrop (Composer) Nov 18, 2025
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL... Moderate Unreviewed
CVE-2025-40545 was published Nov 18, 2025
Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode Moderate
CVE-2025-64716 was published for github.com/TecharoHQ/anubis (Go) Oct 30, 2025
nijel mbiesiad
Credited to nijel and mbiesiad
Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a... Moderate Unreviewed
CVE-2024-13983 was published Nov 14, 2025
A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance... Moderate Unreviewed
CVE-2025-20355 was published Nov 13, 2025
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms... Moderate Unreviewed
CVE-2025-62981 was published Oct 27, 2025
An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web... Moderate Unreviewed
CVE-2025-63784 was published Nov 7, 2025
Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker... Moderate Unreviewed
CVE-2025-42893 was published Nov 11, 2025
SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious... Moderate Unreviewed
CVE-2025-42924 was published Nov 11, 2025
A flaw was found in Red Hat Single Sign-On. This issue is an Open Redirect vulnerability that... Moderate Unreviewed
CVE-2025-12789 was published Nov 7, 2025
Follow Redirects improperly handles URLs in the url.parse() function Moderate
CVE-2023-26159 was published for follow-redirects (npm) Jan 2, 2024
iainsproat
Credited to iainsproat
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database