Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,455
Maven
5,000+
npm
5,000+
NuGet
1,090
pip
5,000+
Pub
13
RubyGems
1,135
Rust
1,509
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

10 advisories

Loading
Malicious code in mysten_metrics (crates.io) Malware
GHSA-4vwj-fpjf-wmmg was published for mysten-metrics (Rust) Jul 18, 2026
Malicious code in semantic_search_client (crates.io) Malware
GHSA-jfw2-4jxj-8f9c was published for semantic-search-client (Rust) Jul 18, 2026
Malicious code in supertag (crates.io) Malware
GHSA-ppxc-v5qv-9fm6 was published for supertag (Rust) Jul 18, 2026
Malicious code in replit_ruspty (crates.io) Malware
GHSA-943g-w75h-8v9h was published for replit_ruspty (Rust) Jul 18, 2026
Malicious code in proton_pfff (crates.io) Malware
GHSA-2c45-qvwj-8jfx was published for proton-pfff (Rust) Jul 18, 2026
Malicious code in littest (crates.io) Malware
GHSA-9cpx-g2hc-4j42 was published for littest (Rust) Jul 18, 2026
Malicious code in lsh (crates.io) Malware
GHSA-ffmx-5mf5-q3hc was published for lsh (Rust) Jul 18, 2026
Malicious code in amzn_codewhisperer_streaming_client (crates.io) Malware
GHSA-92vh-m3v8-jv6h was published for amzn-codewhisperer-streaming-client (Rust) Jul 18, 2026
Malicious code in amzn_consolas_client (crates.io) Malware
GHSA-7jx2-pf66-g5qj was published for amzn-consolas-client (Rust) Jul 18, 2026
`rustdecimal` is a malicious crate Malware
GHSA-7pwq-f4pq-78gm was published for rustdecimal (Rust) Aug 11, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database