GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21
11,917 advisories
Filter by severity
Malicious code in doctreelstm (PyPI)
Malware
GHSA-5fxv-5qc2-53g8
was published
for
doctreelstm
(pip)
Oct 31, 2026
Malicious code in is-it-ai (PyPI)
Malware
GHSA-76h8-w3px-47hx
was published
for
is-it-ai
(pip)
Oct 31, 2026
Malicious code in skills-analyzer (PyPI)
Malware
GHSA-r92r-m9r8-78vj
was published
for
skills-analyzer
(pip)
Oct 31, 2026
Malicious code in md-to-slides (PyPI)
Malware
GHSA-7p4v-mm6f-8g5c
was published
for
md-to-slides
(pip)
Oct 31, 2026
Malicious code in multi-convert (PyPI)
Malware
GHSA-vh26-86vj-f72g
was published
for
multi-convert
(pip)
Oct 31, 2026
Malicious code in log-utils-sdk (PyPI)
Malware
GHSA-gm8f-99q4-fpjh
was published
for
log-utils-sdk
(pip)
Oct 30, 2026
Malicious code in stdid-nyxprobe (PyPI)
Malware
GHSA-9g52-4q2j-2cg3
was published
for
stdid-nyxprobe
(pip)
Oct 30, 2026
Malicious code in test-01-rafamarrara-learning-dc (PyPI)
Malware
GHSA-9wjc-g5vf-3m22
was published
for
test-01-rafamarrara-learning-dc
(pip)
Oct 30, 2026
Malicious code in twitter-request-diagnostics (PyPI)
Malware
GHSA-w3jr-q4jr-xq95
was published
for
twitter-request-diagnostics
(pip)
Oct 30, 2026
Malicious code in bq-helix-recon-6ade983e (PyPI)
Malware
GHSA-9r7r-h4fq-xj8p
was published
for
bq-helix-recon-6ade983e
(pip)
Oct 29, 2026
Malicious code in bq-helix-build-hook-6ade983e (PyPI)
Malware
GHSA-526r-6j5j-v9pv
was published
for
bq-helix-build-hook-6ade983e
(pip)
Oct 29, 2026
Malicious code in poc-revshell (PyPI)
Malware
GHSA-h7h9-fmhv-56wh
was published
for
poc-revshell
(pip)
Oct 29, 2026
Malicious code in trajmetrics (PyPI)
Malware
GHSA-rm9p-x4m7-hxmp
was published
for
trajmetrics
(pip)
Oct 28, 2026
Malicious code in numprint (PyPI)
Malware
GHSA-g9fj-q87h-6h4c
was published
for
numprint
(pip)
Oct 27, 2026
Malicious code in h13t0ry-hello-demo (PyPI)
Malware
GHSA-5crq-52j9-fc74
was published
for
h13t0ry-hello-demo
(pip)
Oct 27, 2026
Malicious code in netweavex (PyPI)
Malware
GHSA-rr8h-gqmw-34rx
was published
for
netweavex
(pip)
Oct 26, 2026
Malicious code in zagents-framework (PyPI)
Malware
GHSA-vqh8-gjqw-v2r3
was published
for
zagents-framework
(pip)
Oct 26, 2026
Malicious code in changes-lxc-wrapper (PyPI)
Malware
GHSA-3rm9-gfp2-hphh
was published
for
changes-lxc-wrapper
(pip)
Oct 26, 2026
Malicious code in dictmerge-lite (PyPI)
Malware
GHSA-825m-m2h7-7cwc
was published
for
dictmerge-lite
(pip)
Oct 26, 2026
Malicious code in claudeopusenifile (PyPI)
Malware
GHSA-8whx-wfhh-6vh5
was published
for
claudeopusenifile
(pip)
Oct 26, 2026
Malicious code in claudeopuseni (PyPI)
Malware
GHSA-6m96-8rw5-4rhw
was published
for
claudeopuseni
(pip)
Oct 26, 2026
Malicious code in claudeopusfile (PyPI)
Malware
GHSA-jgm6-7jxr-97gx
was published
for
claudeopusfile
(pip)
Oct 26, 2026
Malicious code in nebulallm (PyPI)
Malware
GHSA-mvgr-2gjf-h99c
was published
for
nebulallm
(pip)
Oct 25, 2026
Malicious code in zagents-message-bus (PyPI)
Malware
GHSA-2hr3-wchh-6g2q
was published
for
zagents-message-bus
(pip)
Oct 25, 2026
Malicious code in fontus (PyPI)
Malware
GHSA-g5mh-f2v3-6p25
was published
for
fontus
(pip)
Oct 25, 2026
ProTip!
Advisories are also available from the
GraphQL API