GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,179
Erlang
31
GitHub Actions
19
Go
1,982
Maven
5,000+
npm
3,701
NuGet
656
pip
3,323
Pub
11
RubyGems
882
Rust
834
Swift
35
Unreviewed advisories
All unreviewed
5,000+
59 advisories
Filter by severity
python-fedora vulnerable to an open redirect resulting in loss of CSRF protection
Moderate
CVE-2017-1002150
was published
for
python-fedora
(pip)
Jul 13, 2018
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
Moderate
CVE-2017-7233
was published
for
Django
(pip)
Jan 4, 2019
Open Redirect vulnerability in jupyterhub and notebook
Moderate
CVE-2019-10255
was published
for
jupyterhub
(pip)
Apr 2, 2019
Jupyter Notebook open redirect vulnerability
Moderate
CVE-2019-10856
was published
for
notebook
(pip)
Apr 9, 2019
Open redirect in Jupyter Server
Moderate
CVE-2020-26232
was published
for
jupyter-server
(pip)
Nov 24, 2020
Jupyter Server open redirect vulnerability
Moderate
CVE-2020-26275
was published
for
jupyter-server
(pip)
Dec 21, 2020
Open redirects on some federation and push requests
Moderate
CVE-2021-21273
was published
for
matrix-synapse
(pip)
Feb 26, 2021
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
Moderate
CVE-2021-21337
was published
for
Products.PluggableAuthService
(pip)
Mar 8, 2021
OMERO webclient does not validate URL redirects on login or switching group.
Moderate
CVE-2021-21377
was published
for
omero-web
(pip)
Mar 23, 2021
Open redirect in Flask-Unchained
Moderate
CVE-2021-23393
was published
for
Flask-Unchained
(pip)
Jun 15, 2021
Open Redirect in Apache Superset
Moderate
CVE-2021-28125
was published
for
apache-superset
(pip)
Oct 6, 2021
Cross-site Scripting and Open Redirect in Products.ATContentTypes
Moderate
CVE-2022-23599
was published
for
Products.ATContentTypes
(pip)
Jan 28, 2022
Unsafe handling of user-specified cookies in treq
Moderate
CVE-2022-23607
was published
for
treq
(pip)
Feb 1, 2022
Cross-site Scripting and Open Redirect in plone.app.contenttypes
Moderate
GHSA-f7qw-5fgj-247x
was published
for
plone.app.contenttypes
(pip)
Feb 1, 2022
Open Redirect in CPython that affects users of OpenStack Nova
Moderate
CVE-2021-3654
was published
for
nova
(pip)
Mar 4, 2022
Open Redirect in django-spirit
Moderate
CVE-2022-0869
was published
for
django-spirit
(pip)
Mar 7, 2022
Open Redirect in Flask-AppBuilder
Moderate
CVE-2022-24776
was published
for
Flask-AppBuilder
(pip)
Mar 25, 2022
ProTip!
Advisories are also available from the
GraphQL API