Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
45
GitHub Actions
47
Go
3,309
Maven
5,000+
npm
5,000+
NuGet
876
pip
4,531
Pub
12
RubyGems
1,009
Rust
1,195
Swift
51
Unreviewed advisories
All unreviewed
5,000+

2 advisories

Loading
Prototype Pollution in JSON5 via Parse Method High
CVE-2022-46175 was published for json5 (npm) Dec 29, 2022
jdgregson Credited to jdgregson, karlhorky, jordanbtucker, jakebailey, ebroder, kenkku, gazben, BGehrels, mrgrain, sigma-z, viceice, burdeasa, sirenevenkii, and edwardlee-msft karlhorky karlhorky
jordanbtucker jordanbtucker jakebailey jakebailey ebroder ebroder kenkku kenkku gazben gazben BGehrels BGehrels mrgrain mrgrain sigma-z sigma-z viceice viceice burdeasa burdeasa sirenevenkii sirenevenkii edwardlee-msft edwardlee-msft
glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service High
CVE-2021-35065 was published for glob-parent (npm) Jul 18, 2022
cowsrule Credited to cowsrule, wejendorp, wwuck, paulmillr, and BGehrels wejendorp wejendorp
wwuck wwuck paulmillr paulmillr BGehrels BGehrels
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database