Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,883
Maven
5,000+
npm
5,000+
NuGet
1,134
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,555
Rust
20

124,336 advisories

Loading
Malware in waie-crash-baileys Malware
GHSA-5r5f-v5vv-289q was published for waie-crash-baileys (npm) Oct 7, 2026
Malicious code in windows_registry_editor (npm) Malware
GHSA-mmx2-rhc3-vg25 was published for windows_registry_editor (npm) Oct 7, 2026
Malicious code in store-webpack-config (npm) Malware
GHSA-v9x4-6r9x-f7mf was published for store-webpack-config (npm) Oct 7, 2026
Malicious code in troubleshooting (npm) Malware
GHSA-42gg-4m94-8m7w was published for troubleshooting (npm) Oct 7, 2026
Malicious code in browser-metrics-plugin.contrib (npm) Malware
GHSA-qxf4-wgfv-6mvr was published for browser-metrics-plugin.contrib (npm) Oct 7, 2026
Malicious code in personio-pipeline-projen (npm) Malware
GHSA-ph63-hxpv-5cwm was published for personio-pipeline-projen (npm) Oct 7, 2026
Malicious code in lore-cs (PyPI) Malware
GHSA-r95v-h8pf-wxhj was published for lore-cs (pip) Oct 7, 2026
Malicious code in css-jptvix-polyfill (npm) Malware
GHSA-m6m7-6f4x-c5v3 was published for css-jptvix-polyfill (npm) Oct 6, 2026
Malware in @kxa/xbails Malware
GHSA-7gvw-4c75-pc6p was published for @kxa/xbails (npm) Oct 6, 2026
Malware in captchetat-angularv8 Malware
GHSA-7crr-x792-cp3w was published for captchetat-angularv8 (npm) Oct 6, 2026
Malicious code in internallib_v23 (npm) Malware
GHSA-hpq7-6v2v-xmq3 was published for internallib_v23 (npm) Oct 6, 2026
Malicious code in internallib_v875 (npm) Malware
GHSA-pjcv-xqxg-cv9j was published for internallib_v875 (npm) Oct 6, 2026
Malicious code in @pinecone-experience/messages (npm) Malware
GHSA-px72-v3hv-7q87 was published for @pinecone-experience/messages (npm) Oct 6, 2026
Malicious code in hardhat-init (npm) Malware
GHSA-w6mp-phr7-c2v5 was published for hardhat-init (npm) Oct 6, 2026
Malicious code in internallib_v30 (npm) Malware
GHSA-rqhh-xrhc-wr23 was published for internallib_v30 (npm) Oct 6, 2026
Malicious code in internallib_v86 (npm) Malware
GHSA-5q3r-2hm2-jm3j was published for internallib_v86 (npm) Oct 6, 2026
Malicious code in zencleaner (PyPI) Malware
GHSA-4493-p4qp-qw6p was published for zencleaner (pip) Oct 6, 2026
Malicious code in virgil-cli (npm) Malware
GHSA-6j8f-g5mj-4wcj was published for virgil-cli (npm) Oct 6, 2026
Malware in dotenv-async Malware
GHSA-gp83-4g76-4qg5 was published for dotenv-async (npm) Oct 6, 2026
Malicious code in erc7730-hackathon (PyPI) Malware
GHSA-vcg2-mffq-hjmg was published for erc7730-hackathon (pip) Oct 5, 2026
Malware in @inpeek/odata-angular Malware
GHSA-7p27-jmq6-46ph was published for @inpeek/odata-angular (npm) Oct 5, 2026
Malware in @inpeek/odata Malware
GHSA-cmm5-vwvx-cv5f was published for @inpeek/odata (npm) Oct 5, 2026
Malicious code in tron-rb (RubyGems) Malware
GHSA-pfxv-45h9-p87w was published for tron-rb (RubyGems) Oct 5, 2026
Malicious code in tx-broadcast-utils (RubyGems) Malware
GHSA-m56c-f68h-prj5 was published for tx-broadcast-utils (RubyGems) Oct 5, 2026
Malicious code in blockchain-sync-utils (RubyGems) Malware
GHSA-fp5m-6565-9wg5 was published for blockchain-sync-utils (RubyGems) Oct 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database