Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
109
GitHub Actions
55
Go
4,556
Maven
5,000+
npm
5,000+
NuGet
1,103
pip
5,000+
Pub
13
RubyGems
1,146
Rust
1,518
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
19

19 advisories

Loading
Malicious code in internment (crates.io) Malware
GHSA-mxq3-8c5w-crcm was published for internment (Rust) Aug 21, 2026
Malicious code in append_only_vec (crates.io) Malware
GHSA-m9v3-f7h2-72cp was published for append-only-vec (Rust) Aug 21, 2026
Malicious code in tinymember (crates.io) Malware
GHSA-jpmw-jcm2-3wcq was published for tinymember (Rust) Aug 21, 2026
Malicious code in aovine (crates.io) Malware
GHSA-r47g-vj55-h745 was published for aovine (Rust) Aug 21, 2026
Malicious code in proc_macro_en (crates.io) Malware
GHSA-4v73-396v-6ph9 was published for proc-macro-en (Rust) Aug 21, 2026
Malicious code in arrayref (crates.io) Malware
GHSA-jwh4-228v-r358 was published for arrayref (Rust) Aug 21, 2026
Malicious code in aronenao (crates.io) Malware
GHSA-vqfg-g9r4-x39f was published for aronenao (Rust) Aug 21, 2026
Malicious code in proc_macro1 (crates.io) Malware
GHSA-m83q-4x86-96wh was published for proc-macro1 (Rust) Aug 21, 2026
Malicious code in arone (crates.io) Malware
GHSA-7h2v-6jmm-f43m was published for arone (Rust) Aug 21, 2026
Malicious code in mysten_metrics (crates.io) Malware
GHSA-4vwj-fpjf-wmmg was published for mysten-metrics (Rust) Jul 18, 2026
Malicious code in semantic_search_client (crates.io) Malware
GHSA-jfw2-4jxj-8f9c was published for semantic-search-client (Rust) Jul 18, 2026
Malicious code in supertag (crates.io) Malware
GHSA-ppxc-v5qv-9fm6 was published for supertag (Rust) Jul 18, 2026
Malicious code in replit_ruspty (crates.io) Malware
GHSA-943g-w75h-8v9h was published for replit_ruspty (Rust) Jul 18, 2026
Malicious code in proton_pfff (crates.io) Malware
GHSA-2c45-qvwj-8jfx was published for proton-pfff (Rust) Jul 18, 2026
Malicious code in amzn_codewhisperer_streaming_client (crates.io) Malware
GHSA-92vh-m3v8-jv6h was published for amzn-codewhisperer-streaming-client (Rust) Jul 18, 2026
Malicious code in amzn_consolas_client (crates.io) Malware
GHSA-7jx2-pf66-g5qj was published for amzn-consolas-client (Rust) Jul 18, 2026
Malicious code in littest (crates.io) Malware
GHSA-9cpx-g2hc-4j42 was published for littest (Rust) Jul 18, 2026
Malicious code in lsh (crates.io) Malware
GHSA-ffmx-5mf5-q3hc was published for lsh (Rust) Jul 18, 2026
`rustdecimal` is a malicious crate Malware
GHSA-7pwq-f4pq-78gm was published for rustdecimal (Rust) Aug 11, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database