Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,970
Maven
5,000+
npm
5,000+
NuGet
1,185
pip
5,000+
Pub
13
RubyGems
1,161
Rust
1,595
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,579
Rust
21

124,658 advisories

Loading
Malicious code in saeka (PyPI) Malware
GHSA-mg63-mhjw-2w9m was published for saeka (pip) Oct 15, 2026
Malware in babel-polyfill-plugin-corejs2 Malware
GHSA-9g6r-83hw-6cq2 was published for babel-polyfill-plugin-corejs2 (npm) Oct 14, 2026
Malware in eth-react-provider Malware
GHSA-rr86-r66c-qc54 was published for eth-react-provider (npm) Oct 14, 2026
Malware in @xxxfnbs21/hello-demo Malware
GHSA-hf57-6wg3-343x was published for @xxxfnbs21/hello-demo (npm) Oct 14, 2026
Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm) Malware
GHSA-36v8-chg8-q674 was published for @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm) Oct 14, 2026
Malicious code in @newspage/libx-amount (npm) Malware
GHSA-49j3-qrv4-xgwv was published for @newspage/libx-amount (npm) Oct 14, 2026
Malicious code in @newspage/lib-ng-async-routes-ui (npm) Malware
GHSA-5m6v-q7rf-gh3x was published for @newspage/lib-ng-async-routes-ui (npm) Oct 14, 2026
Malicious code in monkey-tags-ip (npm) Malware
GHSA-88vx-pphm-qg2x was published for monkey-tags-ip (npm) Oct 14, 2026
Malicious code in @mntv-analysis/ui-components (npm) Malware
GHSA-82g4-6666-2x5v was published for @mntv-analysis/ui-components (npm) Oct 14, 2026
Malicious code in @mntv-analysis/workspaces-components (npm) Malware
GHSA-8qv9-76f6-8h3c was published for @mntv-analysis/workspaces-components (npm) Oct 14, 2026
Malicious code in @mntv-analysis/ui (npm) Malware
GHSA-xrv8-6w5h-xhhf was published for @mntv-analysis/ui (npm) Oct 14, 2026
Malicious code in @user-interface-common/common-styles (npm) Malware
GHSA-h9q3-2w8j-vhfr was published for @user-interface-common/common-styles (npm) Oct 14, 2026
Malicious code in tron-trc20-utils (RubyGems) Malware
GHSA-94vm-385v-mjfj was published for tron-trc20-utils (RubyGems) Oct 11, 2026
Malicious code in block-explorer-api (RubyGems) Malware
GHSA-hg3j-6p9h-76jm was published for block-explorer-api (RubyGems) Oct 11, 2026
Malicious code in wallet-hd-derive (RubyGems) Malware
GHSA-9grv-7vv7-5ppj was published for wallet-hd-derive (RubyGems) Oct 11, 2026
Malicious code in ton-jetton-tools (RubyGems) Malware
GHSA-xqg7-h4h5-x6pf was published for ton-jetton-tools (RubyGems) Oct 11, 2026
Malicious code in nft-metadata-resolver (RubyGems) Malware
GHSA-9f8r-f7cw-6pv8 was published for nft-metadata-resolver (RubyGems) Oct 11, 2026
Malicious code in dex-router-abis (RubyGems) Malware
GHSA-j34r-6fqr-vh5p was published for dex-router-abis (RubyGems) Oct 11, 2026
Malicious code in passwordcracker (npm) Malware
GHSA-jwr3-9ch5-2qw5 was published for passwordcracker (npm) Oct 14, 2026
Malicious code in wallet-balance-scanner (RubyGems) Malware
GHSA-g92c-g6pm-wf38 was published for wallet-balance-scanner (RubyGems) Oct 11, 2026
Malicious code in gemini-computer-use (npm) Malware
GHSA-4cwr-c4gf-f9r4 was published for gemini-computer-use (npm) Sep 21, 2026
Malicious code in hd-wallet-generator (RubyGems) Malware
GHSA-539m-69r6-rw3m was published for hd-wallet-generator (RubyGems) Oct 11, 2026
Malicious code in seed-phrase-validator (RubyGems) Malware
GHSA-vfwp-3q5f-qqrh was published for seed-phrase-validator (RubyGems) Oct 11, 2026
Malicious code in erc20-approve-audit (RubyGems) Malware
GHSA-mq54-cvw7-j5m5 was published for erc20-approve-audit (RubyGems) Oct 11, 2026
Malicious code in staking-apr-fetcher (RubyGems) Malware
GHSA-5wxm-jv9m-mw2r was published for staking-apr-fetcher (RubyGems) Oct 11, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database