Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,475
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,144
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

11,567 advisories

Loading
ascii2text malicious PyPI package Malware
GHSA-hqmv-64pp-q4xw was published for ascii2text (pip) Aug 30, 2022
pyg-utils malicious PyPI package Malware
GHSA-p8ph-q2m4-p5wv was published for pyg-utils (pip) Aug 30, 2022
pymocks malicious PyPI package Malware
GHSA-8rgr-xgx4-q7jq was published for pymocks (pip) Aug 30, 2022
PyProto2 malicious PyPI package Malware
GHSA-gw4j-fhj8-497m was published for PyProto2 (pip) Aug 30, 2022
test-async malicious PyPI package Malware
GHSA-cg89-rrrm-gf58 was published for test-async (pip) Aug 30, 2022
free-net-vpn malicious PyPI package Malware
GHSA-jgw6-3fjm-w5f6 was published for free-net-vpn (pip) Aug 30, 2022
free-net-vpn2 malicious PyPI package Malware
GHSA-rqcv-3wp9-w2r3 was published for free-net-vpn2 (pip) Aug 30, 2022
zlibsrc malicious PyPI package Malware
GHSA-h82j-8jxm-68qp was published for zlibsrc (pip) Aug 30, 2022
browserdiv malicious PyPI package Malware
GHSA-2wg3-9fjw-vjvj was published for browserdiv (pip) Aug 30, 2022
WINRPCexploit malicious PyPI package Malware
GHSA-58g2-rgrr-6q9r was published for WINRPCexploit (pip) Aug 30, 2022
num2words subjected to phishing attack, two versions published containing malware Malware
GHSA-jxr6-qrxx-2ph2 was published for num2words (pip) Jul 31, 2025
Malicious code in 0-8 (PyPI) Malware
GHSA-wccg-8m39-9f66 was published for 0-8 (pip) Jul 13, 2026
Malicious code in 0x000testqwe (PyPI) Malware
GHSA-24w5-9jfw-rfwg was published for 0x000testqwe (pip) Jul 13, 2026
Malicious code in 1337test (PyPI) Malware
GHSA-9g6p-xmqx-gx24 was published for 1337test (pip) Jul 13, 2026
Malicious code in 123bla (PyPI) Malware
GHSA-j8j8-gvx2-m7ww was published for 123bla (pip) Jul 13, 2026
Malicious code in 18923aa (PyPI) Malware
GHSA-rvfx-hmqq-vfmq was published for 18923aa (pip) Jul 13, 2026
Malicious code in fflask (PyPI) Malware
GHSA-mpw9-j6mm-f9gc was published for fflask (pip) Jul 15, 2026
Malicious code in govpkg (PyPI) Malware
GHSA-f88m-xf6h-ph28 was published for govpkg (pip) Jul 18, 2026
Malicious code in trongridme (PyPI) Malware
GHSA-4fhx-73c8-xxhv was published for trongridme (pip) Jul 18, 2026
Malicious code in trongridev (PyPI) Malware
GHSA-hx6g-6877-qvg8 was published for trongridev (pip) Jul 18, 2026
Malicious code in 191239aa (PyPI) Malware
GHSA-38j6-wp79-48jm was published for 191239aa (pip) Jul 21, 2026
Malicious code in 233-misc (PyPI) Malware
GHSA-g43j-9hrr-2cmf was published for 233-misc (pip) Jul 21, 2026
Malicious code in 1923tsl1 (PyPI) Malware
GHSA-227q-jw4j-5w2j was published for 1923tsl1 (pip) Jul 21, 2026
Malicious code in 3m-promo-gen-api (PyPI) Malware
GHSA-cg23-2m3j-mrff was published for 3m-promo-gen-api (pip) Jul 21, 2026
Malicious code in 4123 (PyPI) Malware
GHSA-4rv5-2h67-63wg was published for 4123 (pip) Jul 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database