GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,224
Erlang
31
GitHub Actions
19
Go
1,990
Maven
5,000+
npm
3,706
NuGet
661
pip
3,336
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
719 advisories
Filter by severity
A vulnerability in the web-based management interface of Cisco ECE could allow an...
Moderate
Unreviewed
CVE-2022-20634
was published
Nov 15, 2024
An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due...
Moderate
Unreviewed
CVE-2024-1240
was published
Nov 15, 2024
Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to...
Moderate
Unreviewed
CVE-2024-27592
was published
Apr 11, 2024
A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this...
Moderate
Unreviewed
CVE-2024-11207
was published
Nov 14, 2024
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper...
Moderate
Unreviewed
CVE-2024-25566
was published
Oct 29, 2024
HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be...
Moderate
Unreviewed
CVE-2024-30140
was published
Nov 7, 2024
Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for...
Moderate
Unreviewed
CVE-2024-48463
was published
Nov 4, 2024
There is a low severity open redirect vulnerability within affected versions of Bitbucket Data...
Low
Unreviewed
CVE-2024-21684
was published
Jul 24, 2024
Inadequate validation of URLs could result into an invalid check whether an redirect URL is...
Moderate
Unreviewed
CVE-2024-27184
was published
Aug 20, 2024
URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a...
Moderate
Unreviewed
CVE-2024-25559
was published
Feb 15, 2024
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100...
High
Unreviewed
CVE-2024-43683
was published
Oct 4, 2024
VMware SD-WAN Orchestrator contains an open redirect vulnerability.
A malicious actor may be...
High
Unreviewed
CVE-2024-22248
was published
Apr 2, 2024
Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites...
High
Unreviewed
CVE-2024-2465
was published
Mar 21, 2024
PbootCMS 3.2.8 is vulnerable to URL Redirect.
Moderate
Unreviewed
CVE-2024-42930
was published
Oct 28, 2024
If a site had been granted the permission to open popup windows, it could cause Select elements...
Moderate
Unreviewed
CVE-2024-8386
was published
Sep 3, 2024
Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5
Moderate
Unreviewed
CVE-2024-6149
was published
Jul 10, 2024
An issue was discovered in ViewerJS 0.5.8. A script from the component loads content via URL TAGs...
Moderate
Unreviewed
CVE-2024-25676
was published
May 1, 2024
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP Sunshine Sunshine Photo...
Moderate
Unreviewed
CVE-2024-50463
was published
Oct 28, 2024
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in smp7, wp.Insider Simple...
Moderate
Unreviewed
CVE-2024-49682
was published
Oct 24, 2024
Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack...
Moderate
Unreviewed
CVE-2024-46326
was published
Oct 21, 2024
A URL parameter during login flow was vulnerable to injection. An attacker could insert a...
Moderate
Unreviewed
CVE-2023-28799
was published
Jun 22, 2023
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in QuomodoSoft ElementsReady...
Moderate
Unreviewed
CVE-2024-47353
was published
Oct 11, 2024
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in smp7, wp.Insider Simple...
Moderate
Unreviewed
CVE-2024-47354
was published
Oct 10, 2024
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in EventPrime Events EventPrime...
Moderate
Unreviewed
CVE-2024-47648
was published
Oct 10, 2024
The Analytics Insights for Google Analytics 4 (AIWP) WordPress plugin before 6.3 is vulnerable to...
Moderate
Unreviewed
CVE-2024-0250
was published
Feb 12, 2024
ProTip!
Advisories are also available from the
GraphQL API