Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,875
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,590
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,513
Rust
20

124,213 advisories

Loading
Malicious code in express-nodejs (npm) Malware
GHSA-4qvj-qq37-mhw2 was published for express-nodejs (npm) Sep 29, 2026
Malicious code in exprdd (npm) Malware
GHSA-w7pc-jg8g-2xr4 was published for exprdd (npm) Sep 29, 2026
Malicious code in exptred (npm) Malware
GHSA-9ggr-p22c-2m4m was published for exptred (npm) Sep 29, 2026
Malicious code in shortneer (PyPI) Malware
GHSA-2wm2-fc38-63vw was published for shortneer (pip) Oct 2, 2026
Malicious code in express-javascript (npm) Malware
GHSA-2m2v-6g9c-m674 was published for express-javascript (npm) Sep 29, 2026
Malicious code in brioche-apl-dev-env (npm) Malware
GHSA-8r2r-7gc9-8vq8 was published for brioche-apl-dev-env (npm) Oct 2, 2026
Malicious code in exprrdd (npm) Malware
GHSA-pf56-8g6j-whr9 was published for exprrdd (npm) Sep 29, 2026
Malicious code in xeprews (npm) Malware
GHSA-v76j-vqp4-68j8 was published for xeprews (npm) Sep 29, 2026
Malicious code in infrabench (PyPI) Malware
GHSA-jf4p-2v4v-8p64 was published for infrabench (pip) Oct 3, 2026
Malicious code in apl-rive-renderer (npm) Malware
GHSA-66jg-9x42-xwh9 was published for apl-rive-renderer (npm) Oct 2, 2026
Malicious code in alexa-cybertron-team-code-review-agent (npm) Malware
GHSA-g7c3-m79h-9cqq was published for alexa-cybertron-team-code-review-agent (npm) Oct 2, 2026
Malicious code in express-enhanced (npm) Malware
GHSA-qj2f-36rw-2gvm was published for express-enhanced (npm) Oct 5, 2026
Malicious code in focus-visible-polyfill-lite (npm) Malware
GHSA-5h59-r5m3-rf9w was published for focus-visible-polyfill-lite (npm) Oct 5, 2026
Malicious code in css-starting-style-polyfill (npm) Malware
GHSA-64fj-vj54-m8r3 was published for css-starting-style-polyfill (npm) Oct 5, 2026
Malicious code in express-fork (npm) Malware
GHSA-5pr8-5p22-ffv8 was published for express-fork (npm) Oct 5, 2026
Malicious code in ultimate-websocket (npm) Malware
GHSA-w8c4-4fjc-rg48 was published for ultimate-websocket (npm) Oct 5, 2026
Malicious code in tiny-dom-focus-trap (npm) Malware
GHSA-vr8g-34ph-vq26 was published for tiny-dom-focus-trap (npm) Oct 5, 2026
Malicious code in css-snap-target-polyfill (npm) Malware
GHSA-x6m9-jxjp-c938 was published for css-snap-target-polyfill (npm) Oct 5, 2026
Malicious code in wcag-color-a11y-helpers (npm) Malware
GHSA-hp8q-m388-6xxg was published for wcag-color-a11y-helpers (npm) Oct 5, 2026
Malicious code in tiny-viewport-unit-calc (npm) Malware
GHSA-q9p4-hv94-cxpj was published for tiny-viewport-unit-calc (npm) Oct 5, 2026
Malicious code in chai-as-testmode (npm) Malware
GHSA-5hx2-mp3m-4gr6 was published for chai-as-testmode (npm) Oct 5, 2026
Malicious code in css-interop-observer-polyfill (npm) Malware
GHSA-h3hx-44p9-q47q was published for css-interop-observer-polyfill (npm) Oct 5, 2026
Malicious code in css-relative-color-util (npm) Malware
GHSA-63h7-vcf3-9xgh was published for css-relative-color-util (npm) Oct 5, 2026
Malicious code in css-gap-decorations-polyfill (npm) Malware
GHSA-gpfw-fchg-rwjm was published for css-gap-decorations-polyfill (npm) Oct 5, 2026
Malicious code in css-light-dark-polyfill (npm) Malware
GHSA-p6p9-mjx4-2fgf was published for css-light-dark-polyfill (npm) Oct 5, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database