GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,869
Erlang
36
GitHub Actions
36
Go
2,493
Maven
5,000+
npm
4,119
NuGet
735
pip
3,941
Pub
12
RubyGems
945
Rust
1,018
Swift
39
Unreviewed advisories
All unreviewed
5,000+
1,014 advisories
Filter by severity
Malicious Package in tensorplow
Critical
GHSA-m2fp-c79h-rr79
was published
for
tensorplow
(npm)
Sep 2, 2020
Malicious Package in body-parse-xml
Critical
GHSA-jcmh-9fvm-j39w
was published
for
body-parse-xml
(npm)
Sep 3, 2020
Malicious Package in koa-body-parse
Critical
GHSA-wqgq-mfvj-6qxp
was published
for
koa-body-parse
(npm)
Sep 3, 2020
Malicious Package in discord.js-user
Critical
GHSA-69r6-7h4f-9p7q
was published
for
discord.js-user
(npm)
Sep 3, 2020
Path Traversal in @wturyn/swagger-injector
Critical
GHSA-4x7w-frcq-v4m3
was published
for
@wturyn/swagger-injector
(npm)
Sep 3, 2020
Malicious Package in bubfer-xor
Critical
GHSA-vm67-mh96-95mq
was published
for
bubfer-xor
(npm)
Sep 3, 2020
Malicious Package in buffar-xor
Critical
GHSA-f64g-whxf-w8f2
was published
for
buffar-xor
(npm)
Sep 3, 2020
Malicious Package in buffer-xmr
Critical
GHSA-5327-gfq5-8f4m
was published
for
buffer-xmr
(npm)
Sep 3, 2020
Malicious Package in budfer-xor
Critical
GHSA-6584-gfwm-3vc3
was published
for
budfer-xor
(npm)
Sep 3, 2020
Malicious Package in require-port
Critical
GHSA-rrvm-gqq8-q2wx
was published
for
require-port
(npm)
Sep 3, 2020
Malicious Package in buffer-hor
Critical
GHSA-wh87-3959-vfrq
was published
for
buffer-hor
(npm)
Sep 3, 2020
Malicious Package in yeoman-genrator
Critical
GHSA-f7g4-fm4c-54m9
was published
for
yeoman-genrator
(npm)
Sep 3, 2020
Malicious Package in buffer-xo2
Critical
GHSA-f72h-wf57-7xwh
was published
for
buffer-xo2
(npm)
Sep 3, 2020
Malicious Package in buffer-xos
Critical
GHSA-h2j3-gg8w-4858
was published
for
buffer-xos
(npm)
Sep 3, 2020
Malicious Package in buffer-xop
Critical
GHSA-jqjg-v355-hr9q
was published
for
buffer-xop
(npm)
Sep 3, 2020
Malicious Package in js-qha3
Critical
GHSA-vf5m-q45w-8mh9
was published
for
js-qha3
(npm)
Sep 3, 2020
Malicious Package in js-shi3
Critical
GHSA-g37j-v5gh-g25c
was published
for
js-shi3
(npm)
Sep 3, 2020
Malicious Package in js-sha7
Critical
GHSA-hvgc-mggg-pxr2
was published
for
js-sha7
(npm)
Sep 3, 2020
Malicious Package in js-sia3
Critical
GHSA-3mhm-jvqj-fvhg
was published
for
js-sia3
(npm)
Sep 3, 2020
Malicious Package in ns-sha3
Critical
GHSA-j67m-jg9p-ppg4
was published
for
ns-sha3
(npm)
Sep 3, 2020
Malicious Package in sj-tw-abc
Critical
GHSA-4hfc-fv33-ph9p
was published
for
sj-tw-abc
(npm)
Sep 3, 2020
Malicious Package in sj-labc
Critical
GHSA-4fqg-89cc-5pv5
was published
for
sj-labc
(npm)
Sep 4, 2020
ProTip!
Advisories are also available from the
GraphQL API