GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,262
Erlang
31
GitHub Actions
21
Go
2,029
Maven
5,000+
npm
3,732
NuGet
662
pip
3,408
Pub
12
RubyGems
891
Rust
865
Swift
36
Unreviewed advisories
All unreviewed
5,000+
38 advisories
Filter by severity
Vulnerable Redirect URI Validation Results in Open Redirect
Moderate
GHSA-w8gr-xwp4-r9f7
was published
for
org.keycloak:keycloak-services
(Maven)
Oct 14, 2024
Eclipse Glassfish improperly handles http parameters
Moderate
CVE-2024-9329
was published
for
org.glassfish.main.admin:rest-service
(Maven)
Sep 30, 2024
Eclipse Glassfish URL redirection vulnerability
Moderate
CVE-2024-8646
was published
for
org.glassfish.main.web:web-core
(Maven)
Sep 11, 2024
Keycloak Open Redirect vulnerability
Moderate
CVE-2024-7260
was published
for
org.keycloak:keycloak-core
(Maven)
Sep 9, 2024
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow
Moderate
CVE-2023-6717
was published
for
org.keycloak:keycloak-services
(Maven)
Apr 17, 2024
keycloak-core: open redirect via "form_post.jwt" JARM response mode
Moderate
GHSA-9vm7-v8wj-3fqw
was published
for
org.keycloak:keycloak-core
(Maven)
Jan 23, 2024
Keycloak Open Redirect vulnerability
Moderate
CVE-2023-6927
was published
for
org.keycloak:keycloak-parent
(Maven)
Dec 19, 2023
Open redirect in Apache Shiro
Moderate
CVE-2023-46750
was published
for
org.apache.shiro:shiro-web
(Maven)
Dec 14, 2023
Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin
Moderate
CVE-2023-50771
was published
for
org.jenkins-ci.plugins:oic-auth
(Maven)
Dec 13, 2023
Apache Tomcat Open Redirect vulnerability
Moderate
CVE-2023-41080
was published
for
org.apache.tomcat.embed:tomcat-embed-core
(Maven)
Aug 25, 2023
Jenkins OpenShift Login Plugin vulnerable to Open Redirect
Moderate
CVE-2023-37947
was published
for
org.openshift.jenkins:openshift-login
(Maven)
Jul 12, 2023
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
Moderate
CVE-2023-32068
was published
for
org.xwiki.platform:xwiki-platform-oldcore
(Maven)
May 15, 2023
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
Moderate
CVE-2023-29204
was published
for
org.xwiki.platform:xwiki-platform-oldcore
(Maven)
Apr 12, 2023
lambdaisland/uri `authority-regex` returns the wrong authority
Moderate
CVE-2023-28628
was published
for
lambdaisland:uri
(Maven)
Mar 27, 2023
Open redirect vulnerability in Jenkins OpenID Plugin
Moderate
CVE-2023-24445
was published
for
org.jenkins-ci.plugins:openid
(Maven)
Jan 26, 2023
Apache Helix UI vulnerable to Open Redirect
Moderate
CVE-2022-47500
was published
for
org.apache.helix:helix
(Maven)
Dec 19, 2022
Jenkins Google Login Plugin Open Redirect vulnerability
Moderate
CVE-2022-46683
was published
for
org.jenkins-ci.plugins:google-login
(Maven)
Dec 12, 2022
Authenticated OpenRedirect Vulnerability
Moderate
CVE-2022-41965
was published
for
org.opencastproject:opencast-common
(Maven)
Nov 30, 2022
Server-side request forgery in Apache Dubbo
Moderate
CVE-2022-24969
was published
for
com.alibaba:dubbo
(Maven)
Jun 10, 2022
Open redirect vulnerability in Jenkins CAS Plugin
Moderate
CVE-2021-21673
was published
for
org.jenkins-ci.plugins:cas-plugin
(Maven)
May 24, 2022
Keycloak vulnerable to Server-Side Request Forgery
Moderate
CVE-2020-10770
was published
for
org.keycloak:keycloak-core
(Maven)
May 24, 2022
Athenz vulnerable to Open Redirect
Moderate
CVE-2019-6035
was published
for
com.yahoo.athenz:athenz
(Maven)
May 24, 2022
Jenkins Gitlab Authentication Plugin Open Redirect vulnerability
Moderate
CVE-2019-10372
was published
for
org.jenkins-ci.plugins:gitlab-oauth
(Maven)
May 24, 2022
JBoss KeyCloak Open Redirect
Moderate
CVE-2014-3652
was published
for
org.keycloak:keycloak-services
(Maven)
May 17, 2022
Dojo Open Redirect vulnerability
Moderate
CVE-2010-2274
was published
for
org.dojotoolkit:dojo
(Maven)
May 17, 2022
ProTip!
Advisories are also available from the
GraphQL API