GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21
124,658 advisories
Filter by severity
Malicious code in saeka (PyPI)
Malware
GHSA-mg63-mhjw-2w9m
was published
for
saeka
(pip)
Oct 15, 2026
Malware in babel-polyfill-plugin-corejs2
Malware
GHSA-9g6r-83hw-6cq2
was published
for
babel-polyfill-plugin-corejs2
(npm)
Oct 14, 2026
Malware in eth-react-provider
Malware
GHSA-rr86-r66c-qc54
was published
for
eth-react-provider
(npm)
Oct 14, 2026
Malware in @xxxfnbs21/hello-demo
Malware
GHSA-hf57-6wg3-343x
was published
for
@xxxfnbs21/hello-demo
(npm)
Oct 14, 2026
Malicious code in @user-interface-common/common-styles (npm)
Malware
GHSA-h9q3-2w8j-vhfr
was published
for
@user-interface-common/common-styles
(npm)
Oct 14, 2026
Malicious code in monkey-tags-ip (npm)
Malware
GHSA-88vx-pphm-qg2x
was published
for
monkey-tags-ip
(npm)
Oct 14, 2026
Malicious code in @newspage/libx-amount (npm)
Malware
GHSA-49j3-qrv4-xgwv
was published
for
@newspage/libx-amount
(npm)
Oct 14, 2026
Malicious code in @mntv-analysis/workspaces-components (npm)
Malware
GHSA-8qv9-76f6-8h3c
was published
for
@mntv-analysis/workspaces-components
(npm)
Oct 14, 2026
Malicious code in @mntv-analysis/ui (npm)
Malware
GHSA-xrv8-6w5h-xhhf
was published
for
@mntv-analysis/ui
(npm)
Oct 14, 2026
Malicious code in @newspage/lib-ng-async-routes-ui (npm)
Malware
GHSA-5m6v-q7rf-gh3x
was published
for
@newspage/lib-ng-async-routes-ui
(npm)
Oct 14, 2026
Malicious code in @mntv-analysis/ui-components (npm)
Malware
GHSA-82g4-6666-2x5v
was published
for
@mntv-analysis/ui-components
(npm)
Oct 14, 2026
Malicious code in passwordcrackv2 (npm)
Malware
GHSA-75f2-wpm3-2h52
was published
for
passwordcrackv2
(npm)
Oct 14, 2026
Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)
Malware
GHSA-xwrx-mm2v-334v
was published
for
crelic-bqwheel-52f66a3f1d
(pip)
Oct 14, 2026
Malicious code in passwordcracker (npm)
Malware
GHSA-jwr3-9ch5-2qw5
was published
for
passwordcracker
(npm)
Oct 14, 2026
Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)
Malware
GHSA-36v8-chg8-q674
was published
for
@accenturecodefoundry/mfe-pot-shared-ui-scds-core
(npm)
Oct 14, 2026
Malware in @kre64/hello-npm-test
Malware
GHSA-c43r-xf4h-m548
was published
for
@kre64/hello-npm-test
(npm)
Oct 14, 2026
Malicious code in fontcase (PyPI)
Malware
GHSA-g72q-7v8m-7r9j
was published
for
fontcase
(pip)
Oct 13, 2026
Malicious code in sysdiagd (PyPI)
Malware
GHSA-64w9-pjq6-x8rh
was published
for
sysdiagd
(pip)
Oct 13, 2026
Malware in opencode2-linux-x64-musl
Malware
GHSA-qx7m-vw4p-xv3j
was published
for
opencode2-linux-x64-musl
(npm)
Oct 13, 2026
Malware in opencode2-windows-arm64
Malware
GHSA-xr5m-85hf-27r5
was published
for
opencode2-windows-arm64
(npm)
Oct 13, 2026
Malware in opencode2-windows-x64
Malware
GHSA-6x5j-r784-fx6j
was published
for
opencode2-windows-x64
(npm)
Oct 13, 2026
Malware in opencode2-darwin-arm64
Malware
GHSA-36mq-frp2-jc97
was published
for
opencode2-darwin-arm64
(npm)
Oct 13, 2026
Malware in opencode2-linux-arm64-musl
Malware
GHSA-cm8m-24p9-hh65
was published
for
opencode2-linux-arm64-musl
(npm)
Oct 13, 2026
ProTip!
Advisories are also available from the
GraphQL API