Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
116
GitHub Actions
55
Go
4,683
Maven
5,000+
npm
5,000+
NuGet
1,104
pip
5,000+
Pub
13
RubyGems
1,150
Rust
1,547
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

60,408 advisories

Loading
Malware in ulid-intel Malware
GHSA-h48j-674x-299v was published for ulid-intel (npm) Sep 4, 2026
Malware in @crysnovax/plug Malware
GHSA-vg98-2r8g-7qw2 was published for @crysnovax/plug (npm) Sep 4, 2026
Malware in @crysnovax/baileys-stable Malware
GHSA-p579-542j-6v98 was published for @crysnovax/baileys-stable (npm) Sep 4, 2026
Malware in @crysnovax/baileys-fixed Malware
GHSA-262v-p7h8-9574 was published for @crysnovax/baileys-fixed (npm) Sep 4, 2026
Malware in @crysnovax/baileys Malware
GHSA-c34p-4828-cg5g was published for @crysnovax/baileys (npm) Sep 4, 2026
Malicious code in box-sign-client (npm) Malware
GHSA-g83p-hr9q-m2pp was published for box-sign-client (npm) Sep 4, 2026
Malicious code in line-through (npm) Malware
GHSA-j28f-v2rv-5qxh was published for line-through (npm) Sep 4, 2026
Malicious code in tailwind-contact-forms (npm) Malware
GHSA-389v-79qp-mvg6 was published for tailwind-contact-forms (npm) Sep 4, 2026
Malicious code in real-router-telemetry (npm) Malware
GHSA-cwm2-j3h3-g35f was published for real-router-telemetry (npm) Sep 4, 2026
Malicious code in eslint-rxjs (npm) Malware
GHSA-45hh-8cg6-r5qp was published for eslint-rxjs (npm) Sep 2, 2026
Malicious code in n8n-nodes-social-facebook (npm) Malware
GHSA-588p-6c4c-5xqw was published for n8n-nodes-social-facebook (npm) Jul 27, 2026
Malicious code in box-sign-client-poc (npm) Malware
GHSA-33rh-wv8r-6q4r was published for box-sign-client-poc (npm) Sep 4, 2026
Malicious code in claude-channel-discord (npm) Malware
GHSA-787m-xjf4-8gx6 was published for claude-channel-discord (npm) Sep 4, 2026
Malicious code in damir-cbr-dawdntrnssbf (npm) Malware
GHSA-j2fq-fmwf-wh5r was published for damir-cbr-dawdntrnssbf (npm) Aug 7, 2026
Malicious code in cursed-modules (npm) Malware
GHSA-mv2r-vqp4-wjfq was published for cursed-modules (npm) Jul 27, 2026
Malicious code in cryptodao-sdk (npm) Malware
GHSA-ccp6-844g-fwwg was published for cryptodao-sdk (npm) Jul 27, 2026
Malicious code in cryptodao-backend (npm) Malware
GHSA-jxgc-gf4q-q8p9 was published for cryptodao-backend (npm) Jul 27, 2026
Malicious code in cryptostock (npm) Malware
GHSA-vxm9-fcc8-7337 was published for cryptostock (npm) Aug 10, 2026
Malicious code in crypto-validate-lib (npm) Malware
GHSA-x9fv-7pc2-g9wj was published for crypto-validate-lib (npm) Jul 27, 2026
Malicious code in create-coin (npm) Malware
GHSA-468x-vgxv-xv9w was published for create-coin (npm) Aug 23, 2026
Malicious code in csec-crypto-utils (npm) Malware
GHSA-v2jf-8fqq-49vj was published for csec-crypto-utils (npm) Jul 27, 2026
Malicious code in cryptodao-deploy (npm) Malware
GHSA-r6hm-mp3j-233x was published for cryptodao-deploy (npm) Jul 27, 2026
Malicious code in crosswalker (npm) Malware
GHSA-9wxp-r2hc-p64q was published for crosswalker (npm) Jul 27, 2026
Malicious code in create-mono-package (npm) Malware
GHSA-jxpm-v8q9-fc3x was published for create-mono-package (npm) Jul 27, 2026
Malicious code in damp_hippopotamus_z3n (npm) Malware
GHSA-c5qr-hfqr-35qq was published for damp_hippopotamus_z3n (npm) Sep 4, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database