Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
102
GitHub Actions
54
Go
4,450
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,134
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

42,941 advisories

Loading
Malware in @omniwatch-wick/cli Malware
GHSA-x4cm-7r6h-pjg3 was published for @omniwatch-wick/cli (npm) Jul 29, 2026
Malware in chain-manager Malware
GHSA-257g-ggr2-j398 was published for chain-manager (npm) Jul 29, 2026
Malware in chain-analyze Malware
GHSA-vmj5-cm6w-jrgj was published for chain-analyze (npm) Jul 29, 2026
Malware in @bowozzz/baileys Malware
GHSA-f9vh-885g-hv2f was published for @bowozzz/baileys (npm) Jul 29, 2026
Malicious code in @mypwn/hawkeye (npm) Malware
GHSA-28p4-h97c-j397 was published for @mypwn/hawkeye (npm) Jul 29, 2026
Malicious code in toll_free (npm) Malware
GHSA-8grw-9ghp-8r94 was published for toll_free (npm) Jul 29, 2026
Malicious code in blots (npm) Malware
GHSA-m24q-pqxm-qhqw was published for blots (npm) Jul 29, 2026
Malware in @joyfill/layouts Malware
GHSA-887f-rwr9-wp54 was published for @joyfill/layouts (npm) Jul 28, 2026
Malware in @joyfill/components Malware
GHSA-x4p3-wjxx-m4x5 was published for @joyfill/components (npm) Jul 28, 2026
Malicious code in karpatkit (PyPI) Malware
GHSA-7qg7-6pg7-g63q was published for karpatkit (pip) Jul 28, 2026
Malicious code in govapkg (PyPI) Malware
GHSA-pxxf-hj67-hjm5 was published for govapkg (pip) Jul 28, 2026
Malicious code in mrmustard (PyPI) Malware
GHSA-7h9m-3hvr-pjg2 was published for mrmustard (pip) Jul 28, 2026
Malicious code in dev-helper-bg (PyPI) Malware
GHSA-pcf6-hwj2-m3vw was published for dev-helper-bg (pip) Jul 28, 2026
Malicious code in karpatkey (PyPI) Malware
GHSA-v497-gp55-jwxm was published for karpatkey (pip) Jul 28, 2026
Malicious code in vtranalytic (PyPI) Malware
GHSA-29jr-g2qh-hj97 was published for vtranalytic (pip) Jul 28, 2026
Malicious code in text-line-parser (npm) Malware
GHSA-hp3v-hcrw-9mf8 was published for text-line-parser (npm) Jul 28, 2026
Malicious code in streak-core-math (npm) Malware
GHSA-g827-wm64-px2q was published for streak-core-math (npm) Jul 28, 2026
Malicious code in rollup-runtime-core-polyfills (npm) Malware
GHSA-j877-m36j-5p92 was published for rollup-runtime-core-polyfills (npm) Jul 28, 2026
Malicious code in xerohub-discord-voice-v2 (npm) Malware
GHSA-3h72-42vm-wphp was published for xerohub-discord-voice-v2 (npm) Jul 28, 2026
Malicious code in xerohub-discord-voice-v3 (npm) Malware
GHSA-xw2v-59xv-3c84 was published for xerohub-discord-voice-v3 (npm) Jul 28, 2026
Malicious code in triage_bot_using_sdkv3 (npm) Malware
GHSA-8pwc-32rm-4cgm was published for triage_bot_using_sdkv3 (npm) Jul 28, 2026
Malicious code in streak-daily-lib (npm) Malware
GHSA-456x-5qpf-qrrw was published for streak-daily-lib (npm) Jul 28, 2026
Malicious code in tidal-embed-player (npm) Malware
GHSA-gfxj-v4hg-f5h7 was published for tidal-embed-player (npm) Jul 28, 2026
Malicious code in sigchain-js (npm) Malware
GHSA-j78w-wm55-982q was published for sigchain-js (npm) Jul 28, 2026
Malicious code in streak-core-lib (npm) Malware
GHSA-7vpc-qq63-xvwj was published for streak-core-lib (npm) Jul 28, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database