GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,968
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,616
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,255
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,040
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,050
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            84 advisories
        Filter by severity
        
      
      
    
                    
                      python-fedora vulnerable to an open redirect resulting in loss of CSRF protection
                    
                      
  Moderate
                    
                
                      
                        CVE-2017-1002150
                      
                      was published
                        for
                        
                          python-fedora
                        
                        (pip)
                      Jul 13, 2018 
                    
                  
                    
                      Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
                    
                      
  Moderate
                    
                
                      
                        CVE-2017-7233
                      
                      was published
                        for
                        
                          Django
                        
                        (pip)
                      Jan 4, 2019 
                    
                  
                    
                      Open Redirect vulnerability in jupyterhub and notebook
                    
                      
  Moderate
                    
                
                      
                        CVE-2019-10255
                      
                      was published
                        for
                        
                          jupyterhub
                        
                        (pip)
                      Apr 2, 2019 
                    
                  
                    
                      Jupyter Notebook open redirect vulnerability
                    
                      
  Moderate
                    
                
                      
                        CVE-2019-10856
                      
                      was published
                        for
                        
                          notebook
                        
                        (pip)
                      Apr 9, 2019 
                    
                  
                    
                      Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
                    
                      
  High
                    
                
                      
                        GHSA-r82c-j4mq-5xfw
                      
                      was published
                        for
                        
                          bitlyshortener
                        
                        (pip)
                      Oct 27, 2020 
                    
                  
                    
                      Open redirect in Jupyter Server
                    
                      
  Moderate
                    
                
                      
                        CVE-2020-26232
                      
                      was published
                        for
                        
                          jupyter-server
                        
                        (pip)
                      Nov 24, 2020 
                    
                  
                    
                      Jupyter Server open redirect vulnerability
                    
                      
  Moderate
                    
                
                      
                        CVE-2020-26275
                      
                      was published
                        for
                        
                          jupyter-server
                        
                        (pip)
                      Dec 21, 2020 
                    
                  
                    
                      `aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
                    
                      
  Low
                    
                
                      
                        CVE-2021-21330
                      
                      was published
                        for
                        
                          aiohttp
                        
                        (pip)
                      Feb 26, 2021 
                    
                  
                    
                      Open redirects on some federation and push requests
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-21273
                      
                      was published
                        for
                        
                          matrix-synapse
                        
                        (pip)
                      Feb 26, 2021 
                    
                  
                    
                      URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-21337
                      
                      was published
                        for
                        
                          Products.PluggableAuthService
                        
                        (pip)
                      Mar 8, 2021 
                    
                  
                    
                      OMERO webclient does not validate URL redirects on login or switching group.
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-21377
                      
                      was published
                        for
                        
                          omero-web
                        
                        (pip)
                      Mar 23, 2021 
                    
                  
                    
                      Open redirect via transitional IPv6 addresses on dual-stack networks
                    
                      
  High
                    
                
                      
                        CVE-2021-21392
                      
                      was published
                        for
                        
                          matrix-synapse
                        
                        (pip)
                      Apr 13, 2021 
                    
                  
                    
                      Open Redirect in Flask-Security-Too
                    
                      
  Low
                    
                
                      
                        CVE-2021-32618
                      
                      was published
                        for
                        
                          Flask-Security-Too
                        
                        (pip)
                      May 17, 2021 
                    
                  
                    
                      Open redirect in Flask-Unchained
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-23393
                      
                      was published
                        for
                        
                          Flask-Unchained
                        
                        (pip)
                      Jun 15, 2021 
                    
                  
                    
                      URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
                    
                      
  High
                    
                
                      
                        CVE-2021-32806
                      
                      was published
                        for
                        
                          Products.isurlinportal
                        
                        (pip)
                      Aug 5, 2021 
                    
                  
                    
                      Flask-AppBuilder Open Redirect vulnerability
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-32805
                      
                      was published
                        for
                        
                          Flask-AppBuilder
                        
                        (pip)
                      Sep 8, 2021 
                    
                  
                    
                      Open Redirect in Apache Superset
                    
                      
  Moderate
                    
                
                      
                        CVE-2021-28125
                      
                      was published
                        for
                        
                          apache-superset
                        
                        (pip)
                      Oct 6, 2021 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API