Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,521
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,514
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

50,120 advisories

Loading
Malicious code in tokocrytodev (npm) Malware
GHSA-m482-gfg4-jcp7 was published for tokocrytodev (npm) Aug 10, 2026
Malicious code in gunzip-js (npm) Malware
GHSA-ff3p-88cr-hc25 was published for gunzip-js (npm) Aug 15, 2026
Malicious code in depcruise-fmt (npm) Malware
GHSA-29c8-59h2-f6pq was published for depcruise-fmt (npm) Aug 15, 2026
Malicious code in depcruise-wrap-stream-in-html (npm) Malware
GHSA-8r7w-6hqf-4x5p was published for depcruise-wrap-stream-in-html (npm) Aug 15, 2026
Malicious code in depcruise-baseline (npm) Malware
GHSA-944r-8f8q-66p7 was published for depcruise-baseline (npm) Aug 15, 2026
Malicious code in sn-flow-client (npm) Malware
GHSA-ggg5-26g5-v7q2 was published for sn-flow-client (npm) Jul 27, 2026
Malicious code in harmony-app-toolkit (npm) Malware
GHSA-qp2p-qrmg-36rq was published for harmony-app-toolkit (npm) Aug 15, 2026
Malicious code in supplyhub (npm) Malware
GHSA-8fhv-r6hc-7379 was published for supplyhub (npm) Jul 27, 2026
Malicious code in @openrepl/shared (npm) Malware
GHSA-2253-v578-ppx8 was published for @openrepl/shared (npm) Aug 15, 2026
Malicious code in hunterone-build-probe-9210 (npm) Malware
GHSA-7vcv-c883-w3f6 was published for hunterone-build-probe-9210 (npm) Aug 15, 2026
Malicious code in akamaijs-sensor (npm) Malware
GHSA-86x5-fp9h-hxg3 was published for akamaijs-sensor (npm) Aug 15, 2026
Malicious code in twilio-hackerone-poc-afe6937c (npm) Malware
GHSA-967c-3f68-4gxj was published for twilio-hackerone-poc-afe6937c (npm) Aug 15, 2026
Malicious code in @wololasod/tiny-id (npm) Malware
GHSA-5mh7-hwqc-6rxw was published for @wololasod/tiny-id (npm) Aug 15, 2026
Malicious code in fastly-vcl-language-client (npm) Malware
GHSA-c94r-gh3m-qm4g was published for fastly-vcl-language-client (npm) Aug 15, 2026
Malicious code in @finaxis/common-js (npm) Malware
GHSA-cxv6-5ffv-7w2g was published for @finaxis/common-js (npm) Aug 15, 2026
Malicious code in tw-pkgprobe-7731 (npm) Malware
GHSA-449r-r4hm-3v9g was published for tw-pkgprobe-7731 (npm) Aug 15, 2026
Malicious code in upload-to-gcp (npm) Malware
GHSA-jx3f-5x53-4484 was published for upload-to-gcp (npm) Aug 15, 2026
Malicious code in autbank-core (npm) Malware
GHSA-96pg-c3cg-m9h7 was published for autbank-core (npm) Aug 15, 2026
Malicious code in adxaa (npm) Malware
GHSA-3394-pf38-xc3x was published for adxaa (npm) Aug 15, 2026
Malicious code in require-i18next (npm) Malware
GHSA-4m9p-v3v7-c5xh was published for require-i18next (npm) Aug 15, 2026
Malicious code in akamai-sensor (npm) Malware
GHSA-5rgj-m8xx-vvvj was published for akamai-sensor (npm) Aug 15, 2026
Malicious code in akamaijs-sensorv1 (npm) Malware
GHSA-vf6f-mfc3-9548 was published for akamaijs-sensorv1 (npm) Aug 15, 2026
Malware in svelte-goal-vim Malware
GHSA-qx34-66jv-3pg5 was published for svelte-goal-vim (npm) Aug 15, 2026
Malware in kit-hydration-vim Malware
GHSA-g9cm-v642-m5rj was published for kit-hydration-vim (npm) Aug 15, 2026
Malicious code in @velliajs/discord (npm) Malware
GHSA-5546-mfxg-3v4r was published for @velliajs/discord (npm) Aug 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database