Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,680
Maven
5,000+
npm
4,308
NuGet
760
pip
4,081
Pub
12
RubyGems
958
Rust
1,061
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,038 advisories

Loading
Malicious Package in colro-name Critical
GHSA-jp9g-5x75-ccp8 was published for colro-name (npm) Sep 2, 2020
Malicious Package in tensorplow Critical
GHSA-m2fp-c79h-rr79 was published for tensorplow (npm) Sep 2, 2020
Malicious Package in saync Critical
GHSA-pm9v-325f-5g74 was published for saync (npm) Sep 2, 2020
Malicious Package in jquerz Critical
GHSA-c6f3-3c98-2j2f was published for jquerz (npm) Sep 2, 2020
Malicious Package in yeoman-genrator Critical
GHSA-fm7r-2pr7-rw2p was published for yeoman-genrator (npm) Sep 2, 2020
Malicious Package in browserift Critical
GHSA-43vf-2x6g-p2m5 was published for browserift (npm) Sep 2, 2020
Malicious Package in erquest Critical
GHSA-4pmg-jgm5-3jg6 was published for erquest (npm) Sep 2, 2020
Malicious Package in bmap Critical
GHSA-p59g-6cqr-m73w was published for bmap (npm) Sep 3, 2020
Malicious Package in buffer-hor Critical
GHSA-wh87-3959-vfrq was published for buffer-hor (npm) Sep 3, 2020
Malicious Package in buffer-xmr Critical
GHSA-5327-gfq5-8f4m was published for buffer-xmr (npm) Sep 3, 2020
Malicious Package in yeoman-genrator Critical
GHSA-f7g4-fm4c-54m9 was published for yeoman-genrator (npm) Sep 3, 2020
Malicious Package in budfer-xor Critical
GHSA-6584-gfwm-3vc3 was published for budfer-xor (npm) Sep 3, 2020
Malicious Package in bubfer-xor Critical
GHSA-vm67-mh96-95mq was published for bubfer-xor (npm) Sep 3, 2020
Malicious Package in buffer-xo2 Critical
GHSA-f72h-wf57-7xwh was published for buffer-xo2 (npm) Sep 3, 2020
Malicious Package in require-port Critical
GHSA-rrvm-gqq8-q2wx was published for require-port (npm) Sep 3, 2020
Malicious Package in buffar-xor Critical
GHSA-f64g-whxf-w8f2 was published for buffar-xor (npm) Sep 3, 2020
Malicious Package in buffer-xos Critical
GHSA-h2j3-gg8w-4858 was published for buffer-xos (npm) Sep 3, 2020
Malicious Package in sj-labc Critical
GHSA-4fqg-89cc-5pv5 was published for sj-labc (npm) Sep 4, 2020
Malicious Package in sj-tw-abc Critical
GHSA-4hfc-fv33-ph9p was published for sj-tw-abc (npm) Sep 3, 2020
Malicious Package in ns-sha3 Critical
GHSA-j67m-jg9p-ppg4 was published for ns-sha3 (npm) Sep 3, 2020
Malicious Package in js-shi3 Critical
GHSA-g37j-v5gh-g25c was published for js-shi3 (npm) Sep 3, 2020
Malicious Package in cuffer-xor Critical
GHSA-6xm4-p6r2-mwrc was published for cuffer-xor (npm) Sep 3, 2020
Malicious Package in js-3ha3 Critical
GHSA-52c9-458g-whrf was published for js-3ha3 (npm) Sep 3, 2020
Malicious Package in js-shas Critical
GHSA-5wq6-v5cw-jvfr was published for js-shas (npm) Sep 3, 2020
Malicious Package in js-cha3 Critical
GHSA-7xf9-74cp-8hx3 was published for js-cha3 (npm) Sep 3, 2020
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database