If you discover a security vulnerability within AdonisJS, please send an email to Harminder Virk at virk@adonisjs.com. All security vulnerabilities will be promptly addressed.
Security: adonisjs/http-server
Security
docs/SECURITY.md
-
Unencoded route parameters can produce open redirectsGHSA-2m6q-8v3h-jqww published
Aug 24, 2026 by RomainLanzModerate -
Uncontrolled Resource Consumption and Inefficient Regular Expression ComplexityGHSA-524c-h47v-m3h8 published
Aug 24, 2026 by RomainLanzModerate -
Reflected XSS in AdonisJS HTTP exception handlerGHSA-cwm9-gfhc-46f6 published
Jul 27, 2026 by RomainLanzModerate -
URL Redirection to Untrusted Site ('Open Redirect') in @adonisjs/http-serverGHSA-6qvv-pj99-48qm published
Apr 14, 2026 by thetutlageModerate
Learn more about advisories related to adonisjs/http-server in the GitHub Advisory Database