Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,701
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,566
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

75,884 advisories

Loading
Malicious code in dbt-sa-cli (PyPI) Malware
GHSA-xf8p-r8w2-fx5m was published for dbt-sa-cli (pip) Sep 5, 2026
Malicious code in houdus (PyPI) Malware
GHSA-frjq-w86w-r3gr was published for houdus (pip) Sep 5, 2026
Malicious code in tpu-raiden-jax (PyPI) Malware
GHSA-3cvj-xhpg-ggw5 was published for tpu-raiden-jax (pip) Sep 4, 2026
Malicious code in metricboxlite (PyPI) Malware
GHSA-92qj-f225-g878 was published for metricboxlite (pip) Sep 4, 2026
Malicious code in chartkit-core (PyPI) Malware
GHSA-qhj3-jww9-gmfc was published for chartkit-core (pip) Sep 4, 2026
Malicious code in astlsi (PyPI) Malware
GHSA-mcr6-6rvw-7mg3 was published for astlsi (pip) Sep 4, 2026
Malicious code in @bx-ui-framework/authentication (npm) Malware
GHSA-9q5c-jq8f-775p was published for @bx-ui-framework/authentication (npm) Sep 4, 2026
Malicious code in olympuslib (PyPI) Malware
GHSA-jjjp-27xc-v3pv was published for olympuslib (pip) Sep 4, 2026
Malicious code in qoeoe (PyPI) Malware
GHSA-mf95-3h9p-8xpm was published for qoeoe (pip) Sep 4, 2026
Malicious code in pymaas (PyPI) Malware
GHSA-9hv8-x7fp-26vw was published for pymaas (pip) Sep 4, 2026
Malware in ulid-intel Malware
GHSA-h48j-674x-299v was published for ulid-intel (npm) Sep 4, 2026
Malware in @crysnovax/plug Malware
GHSA-vg98-2r8g-7qw2 was published for @crysnovax/plug (npm) Sep 4, 2026
Malware in @crysnovax/baileys-fixed Malware
GHSA-262v-p7h8-9574 was published for @crysnovax/baileys-fixed (npm) Sep 4, 2026
Malware in @crysnovax/baileys-stable Malware
GHSA-p579-542j-6v98 was published for @crysnovax/baileys-stable (npm) Sep 4, 2026
Malware in @crysnovax/baileys Malware
GHSA-c34p-4828-cg5g was published for @crysnovax/baileys (npm) Sep 4, 2026
Malicious code in timeweave (PyPI) Malware
GHSA-pjqm-mp65-gqw6 was published for timeweave (pip) Sep 4, 2026
Malicious code in box-sign-client (npm) Malware
GHSA-g83p-hr9q-m2pp was published for box-sign-client (npm) Sep 4, 2026
Malicious code in line-through (npm) Malware
GHSA-j28f-v2rv-5qxh was published for line-through (npm) Sep 4, 2026
Malicious code in tailwind-contact-forms (npm) Malware
GHSA-389v-79qp-mvg6 was published for tailwind-contact-forms (npm) Sep 4, 2026
Malicious code in real-router-telemetry (npm) Malware
GHSA-cwm2-j3h3-g35f was published for real-router-telemetry (npm) Sep 4, 2026
Malicious code in eslint-rxjs (npm) Malware
GHSA-45hh-8cg6-r5qp was published for eslint-rxjs (npm) Sep 2, 2026
Malicious code in n8n-nodes-social-facebook (npm) Malware
GHSA-588p-6c4c-5xqw was published for n8n-nodes-social-facebook (npm) Jul 27, 2026
Malicious code in box-sign-client-poc (npm) Malware
GHSA-33rh-wv8r-6q4r was published for box-sign-client-poc (npm) Sep 4, 2026
Malicious code in claude-channel-discord (npm) Malware
GHSA-787m-xjf4-8gx6 was published for claude-channel-discord (npm) Sep 4, 2026
Malicious code in damir-cbr-dawdntrnssbf (npm) Malware
GHSA-j2fq-fmwf-wh5r was published for damir-cbr-dawdntrnssbf (npm) Aug 7, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database