Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
121
GitHub Actions
56
Go
4,875
Maven
5,000+
npm
5,000+
NuGet
1,131
pip
5,000+
Pub
13
RubyGems
1,159
Rust
1,590
Swift
63
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,517
Rust
20
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.

4 advisories

Loading
The cstruct package before 6.3.0 for OCaml mishandles indexes. High Unreviewed
CVE-2026-89087 was published Sep 10, 2026
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:... Moderate Unreviewed
CVE-2026-59998 was published Jul 8, 2026
An Improper Following of Specification by Caller vulnerability in web management (J-Web, Captive... High Unreviewed
CVE-2025-21601 was published Apr 9, 2025
A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and... Moderate Unreviewed
CVE-2019-14829 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database