Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
114
GitHub Actions
55
Go
4,624
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,528
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

56,409 advisories

Loading
Malicious code in vitest-cli-pro (npm) Malware
GHSA-hqvf-2mg4-69wp was published for vitest-cli-pro (npm) Sep 2, 2026
Malicious code in order-package-saas (npm) Malware
GHSA-3g84-3hw7-h9rh was published for order-package-saas (npm) Sep 2, 2026
Malicious code in bt2-api-gateway-node-js (npm) Malware
GHSA-2mp3-m33f-336f was published for bt2-api-gateway-node-js (npm) Sep 2, 2026
Malicious code in evilpostinstall (npm) Malware
GHSA-2jqc-wjj7-w577 was published for evilpostinstall (npm) Aug 31, 2026
Malicious code in peertube-plugin-poc-marker (npm) Malware
GHSA-m44c-j84g-q863 was published for peertube-plugin-poc-marker (npm) Sep 2, 2026
Malicious code in cminhouse-api-gateway-nodejs (npm) Malware
GHSA-4hx5-5274-4w96 was published for cminhouse-api-gateway-nodejs (npm) Sep 2, 2026
Malicious code in chromatitle-dev (npm) Malware
GHSA-frp7-533p-p64q was published for chromatitle-dev (npm) Sep 2, 2026
Malware in eyiouss Malware
GHSA-h2w3-x32h-cpqq was published for eyiouss (npm) Sep 2, 2026
Malware in fetch-page-assets Malware
GHSA-vxq2-vhm7-7mhq was published for fetch-page-assets (npm) Jun 24, 2026
Malware in html-to-gutenberg Malware
GHSA-2gqj-wrf5-35w8 was published for html-to-gutenberg (npm) Jun 24, 2026
Malicious code in gcphelpit (PyPI) Malware
GHSA-9jm3-2h34-h9g3 was published for gcphelpit (pip) Sep 1, 2026
Malicious code in syswatch (PyPI) Malware
GHSA-mpch-m5gg-4894 was published for syswatch (pip) Sep 2, 2026
Malicious code in eslint-rxjs (npm) Malware
GHSA-45hh-8cg6-r5qp was published for eslint-rxjs (npm) Sep 2, 2026
Malware in twapfetch Malware
GHSA-vfw8-w58v-xv38 was published for twapfetch (npm) Sep 2, 2026
Malicious code in envprovision (PyPI) Malware
GHSA-xr9j-7gjp-x8fg was published for envprovision (pip) Aug 24, 2026
Malware in fuels-versions Malware
GHSA-7478-v9hq-9835 was published for fuels-versions (npm) Sep 1, 2026
Malware in fuels-forc Malware
GHSA-h4w6-844f-2fxw was published for fuels-forc (npm) Sep 1, 2026
Malware in generate-schema-viem Malware
GHSA-72cf-ghpg-mj8h was published for generate-schema-viem (npm) Sep 1, 2026
Malware in fuels-core Malware
GHSA-82rr-x2r8-gjhm was published for fuels-core (npm) Sep 1, 2026
Malware in verify-contract-viem Malware
GHSA-rhm2-cc4p-vfxq was published for verify-contract-viem (npm) Sep 1, 2026
Malware in fuels-typegen Malware
GHSA-c4wf-579x-f397 was published for fuels-typegen (npm) Sep 1, 2026
Malware in verify-contract-ethers Malware
GHSA-cvw4-2h4c-hm3f was published for verify-contract-ethers (npm) Sep 1, 2026
Malware in generate-schema-ethers Malware
GHSA-3c7v-grhq-3m56 was published for generate-schema-ethers (npm) Sep 1, 2026
Malware in hyperliquid-composer Malware
GHSA-5v7v-27c5-fr8q was published for hyperliquid-composer (npm) Sep 1, 2026
Malware in cre-setup Malware
GHSA-4894-fvv8-2p2j was published for cre-setup (npm) Sep 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database