Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,535
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,515
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

35,004 advisories

Loading
Malicious code in x6842179305 (npm) Malware
GHSA-v8r3-5x6v-p289 was published for x6842179305 (npm) Aug 19, 2026
Malicious code in ai-texts-utils (npm) Malware
GHSA-2gmj-4q5j-qpxf was published for ai-texts-utils (npm) Aug 19, 2026
Malware in ai-texts Malware
GHSA-h6w4-w8pj-2pwx was published for ai-texts (npm) Aug 19, 2026
Malware in ai-texts-utils Malware
GHSA-3p3q-38q9-rr37 was published for ai-texts-utils (npm) Aug 19, 2026
Malware in finance-business-company-id-models Malware
GHSA-mgqh-vwhj-8hqw was published for finance-business-company-id-models (npm) Aug 19, 2026
Malware in devplatform-s3-client Malware
GHSA-557v-9r2x-4vj7 was published for devplatform-s3-client (npm) Aug 19, 2026
Malware in filewisee Malware
GHSA-wp6h-28pg-v4j5 was published for filewisee (npm) Aug 19, 2026
Malware in node-runtime-utils Malware
GHSA-c436-rrhg-m984 was published for node-runtime-utils (npm) Aug 19, 2026
Malware in fetchcraft Malware
GHSA-fg76-g9g4-9xpr was published for fetchcraft (npm) Aug 19, 2026
Malware in webpack-cdn-fetcher Malware
GHSA-gjvp-mjhq-rfwc was published for webpack-cdn-fetcher (npm) Aug 19, 2026
Malware in fe-utils-core Malware
GHSA-8xf7-7m4f-fgrv was published for fe-utils-core (npm) Aug 19, 2026
Malware in fb-forms-form-boilerplate-contacts Malware
GHSA-rrc5-66g2-j59f was published for fb-forms-form-boilerplate-contacts (npm) Aug 19, 2026
Malware in fb-cards-form-no-resident-information Malware
GHSA-5gv5-4q77-jc7x was published for fb-cards-form-no-resident-information (npm) Aug 19, 2026
Malware in express-request-engine Malware
GHSA-684q-384r-cr7r was published for express-request-engine (npm) Aug 19, 2026
Malware in eslint-config-consumerweb Malware
GHSA-2pxg-969f-jc3q was published for eslint-config-consumerweb (npm) Aug 19, 2026
Malware in griffin-transliterator Malware
GHSA-4hcm-p7x4-q9h9 was published for griffin-transliterator (npm) Aug 19, 2026
Malware in express-enrouten-async Malware
GHSA-25jv-xr7c-mx67 was published for express-enrouten-async (npm) Aug 19, 2026
Malware in test-pkg-pnpm Malware
GHSA-7grv-5j2w-4wx3 was published for test-pkg-pnpm (npm) Aug 19, 2026
Malware in bunnyhijack-test-0x00 Malware
GHSA-8x5v-wf85-xhj5 was published for bunnyhijack-test-0x00 (npm) Aug 19, 2026
Malware in test-pkg-yarn Malware
GHSA-r653-6655-p467 was published for test-pkg-yarn (npm) Aug 19, 2026
Malware in evil-pkg Malware
GHSA-p67r-jq7p-6g7v was published for evil-pkg (npm) Aug 19, 2026
Malware in test-pkg-x0 Malware
GHSA-45jm-p8g6-hcxf was published for test-pkg-x0 (npm) Aug 19, 2026
Malware in express-mocha-test Malware
GHSA-7jq4-grp7-9wq3 was published for express-mocha-test (npm) Aug 19, 2026
Malware in eslint-commit-parser Malware
GHSA-qmq6-r6mp-r586 was published for eslint-commit-parser (npm) Aug 19, 2026
Malware in emojifancy-print Malware
GHSA-46c9-x7v7-2g5h was published for emojifancy-print (npm) Aug 19, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database