GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,875
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,590
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20
124,213 advisories
Filter by severity
Malicious code in focus-visible-polyfill-lite (npm)
Malware
GHSA-5h59-r5m3-rf9w
was published
for
focus-visible-polyfill-lite
(npm)
Oct 5, 2026
Malicious code in css-env-function-shim (npm)
Malware
GHSA-592h-fp69-gpjf
was published
for
css-env-function-shim
(npm)
Oct 5, 2026
Malicious code in css-relative-color-util (npm)
Malware
GHSA-63h7-vcf3-9xgh
was published
for
css-relative-color-util
(npm)
Oct 5, 2026
Malicious code in css-gap-decorations-polyfill (npm)
Malware
GHSA-gpfw-fchg-rwjm
was published
for
css-gap-decorations-polyfill
(npm)
Oct 5, 2026
Malicious code in css-light-dark-polyfill (npm)
Malware
GHSA-p6p9-mjx4-2fgf
was published
for
css-light-dark-polyfill
(npm)
Oct 5, 2026
Malicious code in css-starting-style-polyfill (npm)
Malware
GHSA-64fj-vj54-m8r3
was published
for
css-starting-style-polyfill
(npm)
Oct 5, 2026
Malicious code in express-fork (npm)
Malware
GHSA-5pr8-5p22-ffv8
was published
for
express-fork
(npm)
Oct 5, 2026
Malicious code in css-anchor-pos-fallback (npm)
Malware
GHSA-4ppq-v2jm-24mc
was published
for
css-anchor-pos-fallback
(npm)
Oct 5, 2026
Malicious code in css-reading-flow-polyfill (npm)
Malware
GHSA-h7h4-gh2m-xjmq
was published
for
css-reading-flow-polyfill
(npm)
Oct 5, 2026
Malicious code in css-snap-target-polyfill (npm)
Malware
GHSA-x6m9-jxjp-c938
was published
for
css-snap-target-polyfill
(npm)
Oct 5, 2026
Malicious code in chai-as-testmode (npm)
Malware
GHSA-5hx2-mp3m-4gr6
was published
for
chai-as-testmode
(npm)
Oct 5, 2026
Malicious code in express-enhanced (npm)
Malware
GHSA-qj2f-36rw-2gvm
was published
for
express-enhanced
(npm)
Oct 5, 2026
Malicious code in core-js-gnz (npm)
Malware
GHSA-5q2j-22rc-7634
was published
for
core-js-gnz
(npm)
Oct 5, 2026
Malicious code in css-a11y-contrast-utils (npm)
Malware
GHSA-4hxq-p3xc-m5cr
was published
for
css-a11y-contrast-utils
(npm)
Oct 5, 2026
Malicious code in css-scroll-anchor-polyfill (npm)
Malware
GHSA-wqfg-33rw-c9rw
was published
for
css-scroll-anchor-polyfill
(npm)
Oct 5, 2026
Malicious code in css-logical-prop-shim (npm)
Malware
GHSA-7g6f-95c5-ghgv
was published
for
css-logical-prop-shim
(npm)
Oct 5, 2026
Malicious code in css-field-sizing-polyfill (npm)
Malware
GHSA-rmf7-f53x-p8v6
was published
for
css-field-sizing-polyfill
(npm)
Oct 5, 2026
Malicious code in css-interop-observer-polyfill (npm)
Malware
GHSA-h3hx-44p9-q47q
was published
for
css-interop-observer-polyfill
(npm)
Oct 5, 2026
Malicious code in css-scroll-state-polyfill (npm)
Malware
GHSA-wwwp-g75q-ww7r
was published
for
css-scroll-state-polyfill
(npm)
Oct 5, 2026
Malicious code in hardhat-jsx (npm)
Malware
GHSA-w5cp-x835-j7fg
was published
for
hardhat-jsx
(npm)
Oct 5, 2026
Malicious code in internallib_v275 (npm)
Malware
GHSA-wp69-7q5m-655v
was published
for
internallib_v275
(npm)
Oct 5, 2026
Malicious code in lite-matterr (npm)
Malware
GHSA-6p6v-j47j-wgcr
was published
for
lite-matterr
(npm)
Oct 5, 2026
Malicious code in monitoring-agent (npm)
Malware
GHSA-9q5r-qjph-hpr8
was published
for
monitoring-agent
(npm)
Oct 5, 2026
Malicious code in hardhat-plus (npm)
Malware
GHSA-2hcg-vv96-p63m
was published
for
hardhat-plus
(npm)
Oct 5, 2026
Malicious code in minimal-a11y-contrast-check (npm)
Malware
GHSA-xhw7-45rg-wv8m
was published
for
minimal-a11y-contrast-check
(npm)
Oct 5, 2026
ProTip!
Advisories are also available from the
GraphQL API