GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,788
Maven
5,000+
npm
5,000+
NuGet
1,124
pip
5,000+
Pub
13
RubyGems
1,152
Rust
1,576
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
20
123,512 advisories
Filter by severity
Malicious code in keroeltop (npm)
Malware
GHSA-gg5m-rqpp-c9xf
was published
for
keroeltop
(npm)
Sep 19, 2026
Malicious code in py-venv-doctor (PyPI)
Malware
GHSA-94w6-hr49-qjm7
was published
for
py-venv-doctor
(pip)
Sep 19, 2026
Malware in internallib_v949
Malware
GHSA-f863-m366-9cfm
was published
for
internallib_v949
(npm)
Sep 18, 2026
Malicious code in @shared-web/utils (npm)
Malware
GHSA-29f7-pqf4-c94j
was published
for
@shared-web/utils
(npm)
Sep 18, 2026
Malicious code in tailwindcss-forms-ui (npm)
Malware
GHSA-fc5q-m33g-rp9c
was published
for
tailwindcss-forms-ui
(npm)
Sep 18, 2026
Malicious code in x509-escaping (npm)
Malware
GHSA-fq85-7xqm-cgj9
was published
for
x509-escaping
(npm)
Sep 18, 2026
Malicious code in chai-as-indexed (npm)
Malware
GHSA-727r-6hg5-947x
was published
for
chai-as-indexed
(npm)
Sep 18, 2026
Malicious code in internallib_v949 (npm)
Malware
GHSA-4qw5-jqr6-c4fj
was published
for
internallib_v949
(npm)
Sep 18, 2026
Malicious code in @insiderintelligence/googleadmanager (npm)
Malware
GHSA-76rx-jxhm-vhww
was published
for
@insiderintelligence/googleadmanager
(npm)
Sep 18, 2026
Malicious code in @shared-runtime/modules (npm)
Malware
GHSA-g85c-jph7-8q4r
was published
for
@shared-runtime/modules
(npm)
Sep 18, 2026
Malicious code in google-cloud-datacatalog-lineage-producer-client (PyPI)
Malware
GHSA-hqhg-9c8p-crq3
was published
for
google-cloud-datacatalog-lineage-producer-client
(pip)
Jul 21, 2026
Malware in openmct-heatmap
Malware
GHSA-qx52-2xq4-3x3v
was published
for
openmct-heatmap
(npm)
Sep 18, 2026
Malware in test899-auth
Malware
GHSA-jf2q-w77c-99vv
was published
for
test899-auth
(npm)
Sep 18, 2026
Malware in test890-auth
Malware
GHSA-xvpv-wq7p-548c
was published
for
test890-auth
(npm)
Sep 18, 2026
Malware in test8999-auth
Malware
GHSA-25wf-vfrc-2r82
was published
for
test8999-auth
(npm)
Sep 18, 2026
Malicious code in @shared-web/assets (npm)
Malware
GHSA-vmr9-5w3x-4v98
was published
for
@shared-web/assets
(npm)
Sep 18, 2026
Malicious code in ac-polyfills (npm)
Malware
GHSA-rc6q-95cg-8h5p
was published
for
ac-polyfills
(npm)
Aug 31, 2026
Malicious code in @sanzoffc/baileys (npm)
Malware
GHSA-grqc-r63w-6845
was published
for
@sanzoffc/baileys
(npm)
Sep 18, 2026
Malicious code in tailwindcss-form (npm)
Malware
GHSA-xhr7-h7hc-7785
was published
for
tailwindcss-form
(npm)
Sep 18, 2026
Malicious code in aiosendletter (PyPI)
Malware
GHSA-hc2r-77jq-mjrx
was published
for
aiosendletter
(pip)
Sep 17, 2026
Malicious code in requests-asetwe (PyPI)
Malware
GHSA-38mf-xcf2-88cp
was published
for
requests-asetwe
(pip)
Sep 18, 2026
Malicious code in chai-as-buffered (npm)
Malware
GHSA-jvvq-ph8p-7cc9
was published
for
chai-as-buffered
(npm)
Jul 27, 2026
ProTip!
Advisories are also available from the
GraphQL API