Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,475
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

43,841 advisories

Loading
Malicious code in trezor-lib (npm) Malware
GHSA-7244-wrrf-8qvr was published for trezor-lib (npm) Aug 5, 2026
Malicious code in tinkoff-cache-path (npm) Malware
GHSA-9gcw-36vr-jw5g was published for tinkoff-cache-path (npm) Aug 5, 2026
Malicious code in @zzzgenesis00/ethers-wallet (npm) Malware
GHSA-mfp5-2q2x-vj4p was published for @zzzgenesis00/ethers-wallet (npm) Aug 5, 2026
Malicious code in beaver-ui-form-modal (npm) Malware
GHSA-694p-cpwm-9w6r was published for beaver-ui-form-modal (npm) Aug 5, 2026
Malicious code in add-two-numbers-x7q9m (npm) Malware
GHSA-9pf9-rmxg-xw8w was published for add-two-numbers-x7q9m (npm) Aug 5, 2026
Malicious code in tinkoff-statist-browser-typed-client-sme.compliance.web.events (npm) Malware
GHSA-jj33-jprr-c96x was published for tinkoff-statist-browser-typed-client-sme.compliance.web.events (npm) Aug 5, 2026
Malicious code in bigops-auth-utils (npm) Malware
GHSA-9m43-3q5c-855f was published for bigops-auth-utils (npm) Aug 5, 2026
Malicious code in aedes_clusters (npm) Malware
GHSA-ccmc-q8x3-v382 was published for aedes_clusters (npm) Aug 5, 2026
Malicious code in @zzzgenesis00/bip39-mnemonic (npm) Malware
GHSA-cf5w-8hr5-cpff was published for @zzzgenesis00/bip39-mnemonic (npm) Aug 5, 2026
Malicious code in bigops-chat-tmsg (npm) Malware
GHSA-rjrw-rx8c-5fp2 was published for bigops-chat-tmsg (npm) Aug 5, 2026
Malicious code in volna-boxy-di-test (npm) Malware
GHSA-m6vx-f9vm-7p7q was published for volna-boxy-di-test (npm) Aug 5, 2026
Malicious code in tinkoff-boxy-mobile-vivid-heading (npm) Malware
GHSA-c49g-3j6g-ff99 was published for tinkoff-boxy-mobile-vivid-heading (npm) Aug 5, 2026
Malicious code in bigops-customer (npm) Malware
GHSA-8vj2-2pp5-wgw7 was published for bigops-customer (npm) Aug 5, 2026
Malicious code in bigops-create-manifest (npm) Malware
GHSA-2p8g-p678-pf84 was published for bigops-create-manifest (npm) Aug 5, 2026
Malicious code in platform-ui-island (npm) Malware
GHSA-3q7q-cmmw-mmr4 was published for platform-ui-island (npm) Aug 5, 2026
Malicious code in specials-mvno-client (npm) Malware
GHSA-7x38-rxfc-7439 was published for specials-mvno-client (npm) Aug 5, 2026
Malicious code in streak-day-utils (npm) Malware
GHSA-chvr-9wqf-pw57 was published for streak-day-utils (npm) Aug 5, 2026
Malicious code in statist-browser-typed-client-hra.workplacer.events (npm) Malware
GHSA-cp53-cjcf-6fwx was published for statist-browser-typed-client-hra.workplacer.events (npm) Aug 5, 2026
Malicious code in data-format-helper (npm) Malware
GHSA-8x6p-c3wj-g2h5 was published for data-format-helper (npm) Aug 5, 2026
Malicious code in platform-ui-codemods (npm) Malware
GHSA-jpjf-h9c6-gh26 was published for platform-ui-codemods (npm) Aug 5, 2026
Malicious code in tinkoff-statist-browser-typed-client-sme.reporting.reporting (npm) Malware
GHSA-gxjm-79h7-8p8q was published for tinkoff-statist-browser-typed-client-sme.reporting.reporting (npm) Aug 5, 2026
Malicious code in forge-extended (npm) Malware
GHSA-3pph-gj9f-37j7 was published for forge-extended (npm) Aug 5, 2026
Malicious code in statist-browser-typed-client-test.jumpwork.circuitbreaker (npm) Malware
GHSA-cwf6-c7v4-rv74 was published for statist-browser-typed-client-test.jumpwork.circuitbreaker (npm) Aug 5, 2026
Malicious code in tinkoff-ui-action (npm) Malware
GHSA-xhqw-rjf7-x6h2 was published for tinkoff-ui-action (npm) Aug 5, 2026
Malicious code in uibabai (npm) Malware
GHSA-xm2g-qfpc-cc6h was published for uibabai (npm) Aug 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database