GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
56
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,620
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
11,920 advisories
Filter by severity
Malicious code in twitter-request-diagnostics (PyPI)
Malware
GHSA-w3jr-q4jr-xq95
was published
for
twitter-request-diagnostics
(pip)
Oct 30, 2026
Malicious code in test-01-rafamarrara-learning-dc (PyPI)
Malware
GHSA-9wjc-g5vf-3m22
was published
for
test-01-rafamarrara-learning-dc
(pip)
Oct 30, 2026
Malicious code in bq-helix-recon-6ade983e (PyPI)
Malware
GHSA-9r7r-h4fq-xj8p
was published
for
bq-helix-recon-6ade983e
(pip)
Oct 29, 2026
Malicious code in bq-helix-build-hook-6ade983e (PyPI)
Malware
GHSA-526r-6j5j-v9pv
was published
for
bq-helix-build-hook-6ade983e
(pip)
Oct 29, 2026
Malicious code in trajmetrics (PyPI)
Malware
GHSA-rm9p-x4m7-hxmp
was published
for
trajmetrics
(pip)
Oct 28, 2026
Malicious code in test-workalendar-internal (PyPI)
Malware
GHSA-hv2c-g7m7-m956
was published
for
test-workalendar-internal
(pip)
Oct 20, 2026
Malicious code in zagents-message-bus (PyPI)
Malware
GHSA-2hr3-wchh-6g2q
was published
for
zagents-message-bus
(pip)
Oct 25, 2026
Malicious code in vellutts (PyPI)
Malware
GHSA-r648-hxrj-427m
was published
for
vellutts
(pip)
Oct 22, 2026
Malicious code in ttsprobe (PyPI)
Malware
GHSA-mc55-9j2g-mq57
was published
for
ttsprobe
(pip)
Oct 22, 2026
Malicious code in phonoviatts (PyPI)
Malware
GHSA-59g8-p4vg-hxmp
was published
for
phonoviatts
(pip)
Oct 22, 2026
Malicious code in py-worm (PyPI)
Malware
GHSA-483q-j87r-c97c
was published
for
py-worm
(pip)
Oct 15, 2026
Malicious code in resion (PyPI)
Malware
GHSA-m3vr-hc83-fvc8
was published
for
resion
(pip)
Oct 20, 2026
Malicious code in saeka (PyPI)
Malware
GHSA-mg63-mhjw-2w9m
was published
for
saeka
(pip)
Oct 15, 2026
Malicious code in speechprobe (PyPI)
Malware
GHSA-628w-95w3-p743
was published
for
speechprobe
(pip)
Oct 22, 2026
Malicious code in soundsocket (PyPI)
Malware
GHSA-c6pp-w9mm-gmm2
was published
for
soundsocket
(pip)
Oct 22, 2026
Malicious code in speaksocket (PyPI)
Malware
GHSA-m465-2c74-q5mr
was published
for
speaksocket
(pip)
Oct 22, 2026
Malicious code in taskquay (PyPI)
Malware
GHSA-7q8j-w7hr-738m
was published
for
taskquay
(pip)
Oct 23, 2026
Malicious code in solivoxtts (PyPI)
Malware
GHSA-q9gf-mr6c-mcvv
was published
for
solivoxtts
(pip)
Oct 22, 2026
Malicious code in sedgehaul (PyPI)
Malware
GHSA-rh3j-52jm-8f52
was published
for
sedgehaul
(pip)
Oct 23, 2026
Malicious code in quasitonnts (PyPI)
Malware
GHSA-ghmx-wq8v-9683
was published
for
quasitonnts
(pip)
Oct 17, 2026
Malicious code in reedworker (PyPI)
Malware
GHSA-r9rp-cwq6-9q24
was published
for
reedworker
(pip)
Oct 23, 2026
Malicious code in pipegrip (PyPI)
Malware
GHSA-g6cv-p5vx-78jw
was published
for
pipegrip
(pip)
Oct 22, 2026
Malicious code in runpier (PyPI)
Malware
GHSA-rfx9-3g43-jfm5
was published
for
runpier
(pip)
Oct 23, 2026
Malicious code in ttsflow (PyPI)
Malware
GHSA-6vj3-fvf7-2xw8
was published
for
ttsflow
(pip)
Oct 22, 2026
Malicious code in otterload (PyPI)
Malware
GHSA-pq46-67wf-pfgj
was published
for
otterload
(pip)
Oct 23, 2026
ProTip!
Advisories are also available from the
GraphQL API