GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,186
pip
5,000+
Pub
14
RubyGems
1,162
Rust
1,609
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
11,903 advisories
Filter by severity
Malicious code in h13t0ry-hello-demo (PyPI)
Malware
GHSA-5crq-52j9-fc74
was published
for
h13t0ry-hello-demo
(pip)
Oct 27, 2026
Malicious code in netweavex (PyPI)
Malware
GHSA-rr8h-gqmw-34rx
was published
for
netweavex
(pip)
Oct 26, 2026
Malicious code in changes-lxc-wrapper (PyPI)
Malware
GHSA-3rm9-gfp2-hphh
was published
for
changes-lxc-wrapper
(pip)
Oct 26, 2026
Malicious code in zagents-framework (PyPI)
Malware
GHSA-vqh8-gjqw-v2r3
was published
for
zagents-framework
(pip)
Oct 26, 2026
Malicious code in dictmerge-lite (PyPI)
Malware
GHSA-825m-m2h7-7cwc
was published
for
dictmerge-lite
(pip)
Oct 26, 2026
Malicious code in claudeopusenifile (PyPI)
Malware
GHSA-8whx-wfhh-6vh5
was published
for
claudeopusenifile
(pip)
Oct 26, 2026
Malicious code in claudeopuseni (PyPI)
Malware
GHSA-6m96-8rw5-4rhw
was published
for
claudeopuseni
(pip)
Oct 26, 2026
Malicious code in claudeopusfile (PyPI)
Malware
GHSA-jgm6-7jxr-97gx
was published
for
claudeopusfile
(pip)
Oct 26, 2026
Malicious code in zagents-message-bus (PyPI)
Malware
GHSA-2hr3-wchh-6g2q
was published
for
zagents-message-bus
(pip)
Oct 25, 2026
Malicious code in nebulallm (PyPI)
Malware
GHSA-mvgr-2gjf-h99c
was published
for
nebulallm
(pip)
Oct 25, 2026
Malicious code in fontus (PyPI)
Malware
GHSA-g5mh-f2v3-6p25
was published
for
fontus
(pip)
Oct 25, 2026
Malicious code in flintqueue (PyPI)
Malware
GHSA-5wvh-v7gw-jq6x
was published
for
flintqueue
(pip)
Oct 23, 2026
Malicious code in juniperrun (PyPI)
Malware
GHSA-c47g-m8f4-2x58
was published
for
juniperrun
(pip)
Oct 23, 2026
Malicious code in larchworker (PyPI)
Malware
GHSA-jw6c-mfj3-856p
was published
for
larchworker
(pip)
Oct 23, 2026
Malicious code in cobbleload (PyPI)
Malware
GHSA-hcm3-q2fr-q9gp
was published
for
cobbleload
(pip)
Oct 23, 2026
Malicious code in sedgehaul (PyPI)
Malware
GHSA-rh3j-52jm-8f52
was published
for
sedgehaul
(pip)
Oct 23, 2026
Malicious code in jobwharf (PyPI)
Malware
GHSA-38vx-x27v-x869
was published
for
jobwharf
(pip)
Oct 23, 2026
Malicious code in marshrunner (PyPI)
Malware
GHSA-hp4v-c7rq-5vf9
was published
for
marshrunner
(pip)
Oct 23, 2026
Malicious code in ferretqueue (PyPI)
Malware
GHSA-hq73-fx2j-79q2
was published
for
ferretqueue
(pip)
Oct 23, 2026
Malicious code in loadferry (PyPI)
Malware
GHSA-8r2g-p8j9-xg33
was published
for
loadferry
(pip)
Oct 23, 2026
Malicious code in brambletask (PyPI)
Malware
GHSA-m799-pwxv-jwc5
was published
for
brambletask
(pip)
Oct 23, 2026
Malicious code in reedworker (PyPI)
Malware
GHSA-r9rp-cwq6-9q24
was published
for
reedworker
(pip)
Oct 23, 2026
Malicious code in sitecard (PyPI)
Malware
GHSA-9wjg-8fcv-pxj2
was published
for
sitecard
(pip)
Oct 23, 2026
Malicious code in runpier (PyPI)
Malware
GHSA-rfx9-3g43-jfm5
was published
for
runpier
(pip)
Oct 23, 2026
Malicious code in slatejob (PyPI)
Malware
GHSA-q5q5-m7hc-2f2w
was published
for
slatejob
(pip)
Oct 23, 2026
ProTip!
Advisories are also available from the
GraphQL API