GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,603
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
125,007 advisories
Filter by severity
Malware in agentic-awesome-skills
Malware
GHSA-rgwm-3jj9-h563
was published
for
agentic-awesome-skills
(npm)
Oct 22, 2026
Malware in opencode-skills-collection
Malware
GHSA-9855-prwc-mfp2
was published
for
opencode-skills-collection
(npm)
Oct 22, 2026
Malware in @liauto/darwin-x64
Malware
GHSA-pmg6-2w6r-4q4h
was published
for
@liauto/darwin-x64
(npm)
Oct 22, 2026
Malware in @pkgship/frpc-darwin-amd64
Malware
GHSA-fhh5-55p8-29hj
was published
for
@pkgship/frpc-darwin-amd64
(npm)
Oct 22, 2026
Malware in @sudobility/indexer_client
Malware
GHSA-xfvr-39v2-q24q
was published
for
@sudobility/indexer_client
(npm)
Oct 22, 2026
Malware in @sudobility/shaperouter_client
Malware
GHSA-x7g4-jh5c-33xr
was published
for
@sudobility/shaperouter_client
(npm)
Oct 22, 2026
Malware in @sudobility/wildduck_client
Malware
GHSA-5ff7-5w72-hm63
was published
for
@sudobility/wildduck_client
(npm)
Oct 22, 2026
Malware in @sudobility/testomniac_client
Malware
GHSA-g7cj-274j-rxqw
was published
for
@sudobility/testomniac_client
(npm)
Oct 22, 2026
Malicious code in aanthropic (PyPI)
Malware
GHSA-9793-cg29-78xv
was published
for
aanthropic
(pip)
Oct 22, 2026
Malicious code in test-brotli-testmetest (npm)
Malware
GHSA-r5cq-2h3p-f6qf
was published
for
test-brotli-testmetest
(npm)
Oct 22, 2026
Malicious code in event-emitter-testmetest (npm)
Malware
GHSA-23vf-x9vg-87p2
was published
for
event-emitter-testmetest
(npm)
Oct 22, 2026
Malicious code in net-codec-testmetest (npm)
Malware
GHSA-g4jf-x8gh-87jw
was published
for
net-codec-testmetest
(npm)
Oct 22, 2026
Malicious code in formatting-subtitles (npm)
Malware
GHSA-2cph-9873-fh57
was published
for
formatting-subtitles
(npm)
Oct 22, 2026
Malicious code in simplewave (npm)
Malware
GHSA-p2p5-jx9w-mr89
was published
for
simplewave
(npm)
Oct 22, 2026
Malicious code in log-rotate-testmetest (npm)
Malware
GHSA-c6r9-8976-74gm
was published
for
log-rotate-testmetest
(npm)
Oct 22, 2026
Malicious code in test-brotli2-testmetest (npm)
Malware
GHSA-7qww-92vx-6444
was published
for
test-brotli2-testmetest
(npm)
Oct 22, 2026
Malicious code in fanarena-common (npm)
Malware
GHSA-pq7r-cr8h-g6c8
was published
for
fanarena-common
(npm)
Oct 20, 2026
Malicious code in pixel-map-testmetest (npm)
Malware
GHSA-26g3-4jrv-x55w
was published
for
pixel-map-testmetest
(npm)
Oct 22, 2026
Malicious code in log-sink-testmetest (npm)
Malware
GHSA-7rwv-2p3x-mch4
was published
for
log-sink-testmetest
(npm)
Oct 22, 2026
Malicious code in facewareretargeter (PyPI)
Malware
GHSA-729h-8p7j-mwj4
was published
for
facewareretargeter
(pip)
Oct 21, 2026
Malicious code in @conduitops/logview-archive (npm)
Malware
GHSA-qxg9-x88v-w2gv
was published
for
@conduitops/logview-archive
(npm)
Oct 22, 2026
Malicious code in data-pipeline-testmetest (npm)
Malware
GHSA-6cj6-rwg9-r9jc
was published
for
data-pipeline-testmetest
(npm)
Oct 22, 2026
Malicious code in @platform-services/hrm-mfe-core (npm)
Malware
GHSA-7c67-r266-7883
was published
for
@platform-services/hrm-mfe-core
(npm)
Oct 20, 2026
ProTip!
Advisories are also available from the
GraphQL API