GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,968
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,616
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,255
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,040
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,050
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            84 advisories
        Filter by severity
        
      
      
    
                    
                      Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
                    
                      
  High
                    
                
                      
                        GHSA-r82c-j4mq-5xfw
                      
                      was published
                        for
                        
                          bitlyshortener
                        
                        (pip)
                      Oct 27, 2020 
                    
                  
                    
                      Open Redirect in Flask-Security-Too
                    
                      
  Low
                    
                
                      
                        GHSA-gxjj-f44v-qm94
                      
                      was published
                        for
                        
                          Flask-Security-Too
                        
                        (pip)
                      Dec 14, 2021 
                        •
                        
                          withdrawn
                    
                  
                    
                      Cross-site Scripting and Open Redirect in plone.app.contenttypes
                    
                      
  Moderate
                    
                
                      
                        GHSA-f7qw-5fgj-247x
                      
                      was published
                        for
                        
                          plone.app.contenttypes
                        
                        (pip)
                      Feb 1, 2022 
                    
                  
                    
                      Apache Superset Open Redirect vulnerability
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-43721
                      
                      was published
                        for
                        
                          apache-superset
                        
                        (pip)
                      Jan 16, 2023 
                    
                  
                    
                      Open Redirect in Flask-AppBuilder
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-24776
                      
                      was published
                        for
                        
                          Flask-AppBuilder
                        
                        (pip)
                      Mar 25, 2022 
                    
                  
                    
                      Open Redirect in Apache Superset
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-28125
                      
                      was published
                        for
                        
                          apache-superset
                        
                        (pip)
                      Oct 6, 2021 
                    
                  
                    
                      Flask-Security vulnerable to Open Redirect
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-23385
                      
                      was published
                        for
                        
                          Flask-Security
                        
                        (pip)
                      Oct 7, 2022 
                    
                  
                    
                      Open Redirect in django-spirit
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-0869
                      
                      was published
                        for
                        
                          django-spirit
                        
                        (pip)
                      Mar 7, 2022 
                    
                  
                    
                      Open Redirect in CPython that affects users of OpenStack Nova
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-3654
                      
                      was published
                        for
                        
                          nova
                        
                        (pip)
                      Mar 4, 2022 
                    
                  
                    
                      Terms and Conditions Module vulnerable to Open Redirect
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-4589
                      
                      was published
                        for
                        
                          django-termsandconditions
                        
                        (pip)
                      Dec 17, 2022 
                    
                  
                    
                      Open Redirect vulnerability in jupyterhub and notebook
                    
                      
  Moderate
                    
                
                      
                        CVE-2019-10255
                      
                      was published
                        for
                        
                          jupyterhub
                        
                        (pip)
                      Apr 2, 2019 
                    
                  
                    
                      yt-dlp File Downloader cookie leak
                    
                      
  Moderate
                    
                
                      
                        CVE-2023-35934
                      
                      was published
                        for
                        
                          yt-dlp
                        
                        (pip)
                      Jul 6, 2023 
                    
                  
                    
                      Apache Superset Open Redirect vulnerability
                    
                      
  Moderate
                    
                
                      
                        CVE-2023-42502
                      
                      was published
                        for
                        
                          apache-superset
                        
                        (pip)
                      Nov 28, 2023 
                    
                  
                    
                      pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
                    
                      
  Moderate
                    
                
                      
                        CVE-2024-24808
                      
                      was published
                        for
                        
                          pyload-ng
                        
                        (pip)
                      Feb 5, 2024 
                    
                  
                    
                      Docassemble open redirect
                    
                      
  Moderate
                    
                
                      
                        CVE-2024-27291
                      
                      was published
                        for
                        
                          docassemble.webapp
                        
                        (pip)
                      Feb 29, 2024 
                    
                  
                    
                      Netflix Security Monkey Open Redirect vulnerability
                    
                      
  Moderate
                    
                
                      
                        CVE-2017-7266
                      
                      was published
                        for
                        
                          security_monkey
                        
                        (pip)
                      May 17, 2022 
                    
                  
                    
                      gradio Server-Side Request Forgery vulnerability
                    
                      
  Moderate
                    
                
                      
                        CVE-2024-1183
                      
                      was published
                        for
                        
                          gradio
                        
                        (pip)
                      Apr 16, 2024 
                    
                  
                    
                      cg vulnerable to an Open Redirect Vulnerability on Referer Header
                    
                      
  Moderate
                    
                
                      
                        GHSA-w228-rfpx-fhm4
                      
                      was published
                        for
                        
                          cg
                        
                        (pip)
                      Apr 23, 2024 
                    
                  
                    
                      MobSF vulnerable to Open Redirect in Login Redirect
                    
                      
  Moderate
                    
                
                      
                        CVE-2024-41955
                      
                      was published
                        for
                        
                          mobsf
                        
                        (pip)
                      Jul 31, 2024 
                    
                  
                    
                      Khoj Open Redirect Vulnerability in Login Page
                    
                      
  Moderate
                    
                
                      
                        GHSA-564j-v29w-rqr6
                      
                      was published
                        for
                        
                          khoj-assistant
                        
                        (pip)
                      Jul 8, 2024 
                    
                  
                    
                      `aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
                    
                      
  Low
                    
                
                      
                        CVE-2021-21330
                      
                      was published
                        for
                        
                          aiohttp
                        
                        (pip)
                      Feb 26, 2021 
                    
                  
                    
                      Apache Airflow Contains Open Redirect
                    
                      
  Moderate
                    
                
                      
                        CVE-2022-45402
                      
                      was published
                        for
                        
                          apache-airflow
                        
                        (pip)
                      Nov 15, 2022 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API