Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
40
GitHub Actions
38
Go
2,950
Maven
5,000+
npm
4,596
NuGet
787
pip
4,301
Pub
12
RubyGems
982
Rust
1,121
Swift
49
Unreviewed advisories
All unreviewed
5,000+

1,284 advisories

Loading
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The... Moderate Unreviewed
CVE-2025-15241 was published Dec 30, 2025
CWE-601 URL Redirection to Untrusted Site ('Open Redirect') Moderate Unreviewed
CVE-2025-55060 was published Dec 29, 2025
An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to... Moderate Unreviewed
CVE-2025-60935 was published Dec 24, 2025
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Accept... Moderate Unreviewed
CVE-2025-68602 was published Dec 24, 2025
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Jeff Starr User Submitted... Moderate Unreviewed
CVE-2025-68509 was published Dec 24, 2025
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Restajet Information... Moderate Unreviewed
CVE-2025-1885 was published Dec 19, 2025
Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web... Low Unreviewed
CVE-2025-55254 was published Dec 17, 2025
This issue was addressed with improved URL validation. This issue is fixed in macOS Tahoe 26.2,... Critical Unreviewed
CVE-2025-43526 was published Dec 17, 2025
AVideo versions prior to 20.0 contain an open redirect vulnerability caused by insufficient... Moderate Unreviewed
CVE-2025-34440 was published Dec 17, 2025
AVideo versions prior to 20.0 are vulnerable to an open redirect flaw due to missing validation... Moderate Unreviewed
CVE-2025-34439 was published Dec 17, 2025
Mattermost has missing redirect URL validation Low
CVE-2025-62690 was published for github.com/mattermost/mattermost (Go) Dec 17, 2025
ABP Account Module has an Open Redirect through Improper validation in its register function Moderate
CVE-2025-65581 was published for Volo.Abp.Account.Web (NuGet) Dec 16, 2025
WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject... High Unreviewed
CVE-2023-53901 was published Dec 16, 2025
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist... Moderate Unreviewed
CVE-2025-64250 was published Dec 16, 2025
Mayan EDMS has an Open Redirect through the /authentication/ file Low
CVE-2025-14692 was published for mayan-edms (pip) Dec 15, 2025
The Solutions Ad Manager plugin for WordPress is vulnerable to Open Redirect in all versions up... Moderate Unreviewed
CVE-2025-14451 was published Dec 13, 2025
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows... Moderate Unreviewed
CVE-2025-34504 was published Dec 12, 2025
Miniflux has an Open Redirect via protocol-relative redirect_url Moderate
CVE-2025-67713 was published for miniflux.app/v2 (Go) Dec 10, 2025
satoki
Credited to satoki
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls... Moderate Unreviewed
CVE-2025-67585 was published Dec 9, 2025
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms... Moderate Unreviewed
CVE-2025-67587 was published Dec 9, 2025
Open Redirect Vulnerability in Taguette Moderate
CVE-2025-67502 was published for taguette (pip) Dec 9, 2025
yueyueL
Credited to yueyueL
ZITADEL Vulnerable to Account Takeover Due to Improper Instance Validation in V2 Login High
GHSA-pfrf-9r5f-73f5 was published for github.com/zitadel/zitadel (Go) Dec 8, 2025
amit-laish peintnermax
livio-a
Credited to amit-laish, peintnermax, and livio-a
Central Dogma's Login Function Has an Open Redirect Vulnerability Moderate
CVE-2025-11222 was published for com.linecorp.centraldogma:centraldogma-server-auth-shiro (Maven) Dec 4, 2025
minwoox
Credited to minwoox
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform... Low Unreviewed
CVE-2025-20382 was published Dec 3, 2025
Open redirect in the web server component of MiR Robot and Fleet software allows a remote... Moderate Unreviewed
CVE-2025-13819 was published Dec 1, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database