Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
3,968
Erlang
29
GitHub Actions
16
Go
1,752
Maven
4,982
npm
3,516
NuGet
609
pip
3,090
Pub
10
RubyGems
832
Rust
782
Swift
34
Unreviewed advisories
All unreviewed
5,000+

951 advisories

Loading
Malicious Package in asinc Critical
GHSA-87qw-7v97-w34r was published for asinc (npm) Sep 2, 2020
Malicious Package in asynnc Critical
GHSA-5fm9-jmv7-fcx5 was published for asynnc (npm) Sep 2, 2020
Command Injection in samsung-remote Critical
GHSA-xhjx-mfr6-9rr4 was published for samsung-remote (npm) Sep 1, 2020
Malicious Package in commander-js Critical
GHSA-2hqf-qqmq-pgpp was published for commander-js (npm) Sep 2, 2020
Malicious Package in wepack-cli Critical
GHSA-fpw3-x4xq-6vxq was published for wepack-cli (npm) Sep 2, 2020
Malicious Package in requset Critical
GHSA-w7wg-24g3-2c78 was published for requset (npm) Sep 2, 2020
Malicious Package in donotinstallthis Critical
GHSA-73hr-6785-f5p8 was published for donotinstallthis (npm) Sep 2, 2020
Malicious Package in rimrafall Critical
GHSA-8hq2-fcqm-39hq was published for rimrafall (npm) Sep 2, 2020
Malicious Package in requets Critical
GHSA-f3pc-c2gf-hvgw was published for requets (npm) Sep 2, 2020
Malicious Package in carloprojectlesang Critical
GHSA-qj2g-642f-4jrv was published for carloprojectlesang (npm) Sep 2, 2020
Malicious Package in colour-string Critical
GHSA-8mmf-qp7j-2w24 was published for colour-string (npm) Sep 2, 2020
Malicious Package in require-ports Critical
GHSA-qj3g-wfr7-3cv7 was published for require-ports (npm) Sep 2, 2020
Malicious Package in uglyfi-js Critical
GHSA-9xww-fwh9-95c5 was published for uglyfi-js (npm) Sep 2, 2020
Malicious Package in commmander Critical
GHSA-q42c-rrp3-r3xm was published for commmander (npm) Sep 11, 2020
Malicious Package in requst Critical
GHSA-8qx4-r7fx-xc4v was published for requst (npm) Sep 11, 2020
Malicious Package in destroyer-of-worlds Critical
GHSA-w3f3-4j22-2v3p was published for destroyer-of-worlds (npm) Sep 2, 2020
Forgeable Public/Private Tokens in jwt-simple Critical
CVE-2016-10555 was published for jwt-simple (npm) Nov 6, 2018
Malicious Package in smartsearchwp Critical
GHSA-fgp6-8g62-qx6w was published for smartsearchwp (npm) Sep 3, 2020
Malicious Package in rpc-websocket Critical
GHSA-x87g-rgrh-r6g3 was published for rpc-websocket (npm) Sep 3, 2020
Arbitrary Code Execution in mathjs Critical
CVE-2017-1001002 was published for mathjs (npm) Dec 18, 2017
False-positive validity for NFT1 genesis transactions Critical
CVE-2020-15131 was published for slp-validate (npm) Jul 30, 2020
Command Injection in ungit Critical
CVE-2015-4130 was published for ungit (npm) Aug 31, 2020
Cross-Site Scripting in swagger-ui Critical
CVE-2016-1000226 was published for swagger-ui (npm) Sep 1, 2020
Malicious Package in nginxbeautifier Critical
GHSA-28xx-8j99-m32j was published for nginxbeautifier (npm) Sep 1, 2020
Malicious Package in angular-material-sidenav-rnd Critical
GHSA-qmxf-fxq7-w59f was published for angular-material-sidenav-rnd (npm) Sep 1, 2020
ProTip! Advisories are also available from the GraphQL API