GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,313
Erlang
31
GitHub Actions
21
Go
2,072
Maven
5,000+
npm
3,744
NuGet
669
pip
3,433
Pub
12
RubyGems
892
Rust
880
Swift
37
Unreviewed advisories
All unreviewed
5,000+
335 advisories
Filter by severity
Malicious Package in siganle
Critical
GHSA-p5p2-rhc3-wmf3
was published
for
siganle
(npm)
Sep 3, 2020
Malicious Package in scryptys
Critical
GHSA-vrxj-4qhw-5vwq
was published
for
scryptys
(npm)
Sep 3, 2020
Malicious Package in scrytsy
Critical
GHSA-vv7g-pjw9-4qj9
was published
for
scrytsy
(npm)
Sep 3, 2020
Malicious Package in ripedm160
Critical
GHSA-9272-59x2-gwf2
was published
for
ripedm160
(npm)
Sep 3, 2020
Malicious Package in ripmed160
Critical
GHSA-gmjp-776j-2394
was published
for
ripmed160
(npm)
Sep 3, 2020
Malicious Package in riped160
Critical
GHSA-rwcq-qpm6-7867
was published
for
riped160
(npm)
Sep 3, 2020
Malicious Package in path-to-regxep
Critical
GHSA-f7gc-6hcj-wc42
was published
for
path-to-regxep
(npm)
Sep 3, 2020
Malicious Package in hw-trnasport-u2f
Critical
GHSA-4363-x42f-xph6
was published
for
hw-trnasport-u2f
(npm)
Sep 3, 2020
Malicious Package in fs-extar
Critical
GHSA-435c-qcpm-wjw5
was published
for
fs-extar
(npm)
Sep 3, 2020
Malicious Package in rpc-websocket
Critical
GHSA-x87g-rgrh-r6g3
was published
for
rpc-websocket
(npm)
Sep 3, 2020
Malicious Package in malicious-do-not-install
Critical
GHSA-6879-xr95-5gf4
was published
for
malicious-do-not-install
(npm)
Sep 3, 2020
Malicious Package in leetlog
Critical
GHSA-gfm8-g3vm-53jh
was published
for
leetlog
(npm)
Sep 3, 2020
Malicious Package in maybemaliciouspackage
Critical
GHSA-m9r7-q9fc-qwx5
was published
for
maybemaliciouspackage
(npm)
Sep 3, 2020
Malicious Package in my-very-own-package
Critical
GHSA-crr2-ph72-c52g
was published
for
my-very-own-package
(npm)
Sep 3, 2020
Malicious Package in only-test-not-install
Critical
GHSA-g9wf-393q-4w38
was published
for
only-test-not-install
(npm)
Sep 3, 2020
Malicious Package in ali-contributor
Critical
GHSA-h3m2-h22h-695r
was published
for
ali-contributor
(npm)
Sep 3, 2020
ProTip!
Advisories are also available from the
GraphQL API