Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,037
Erlang
29
GitHub Actions
18
Go
1,858
Maven
5,000+
npm
3,587
NuGet
636
pip
3,170
Pub
10
RubyGems
851
Rust
804
Swift
34
Unreviewed advisories
All unreviewed
5,000+

4 advisories

markdown-it-py Denial of Service vulnerability in the command line interface Moderate
CVE-2023-26302 was published for markdown-it-py (pip) Feb 23, 2023
markdown-it-py Denial of Service vulnerability Moderate
CVE-2023-26303 was published for markdown-it-py (pip) Feb 23, 2023
node-fetch forwards secure headers to untrusted sites High
CVE-2022-0235 was published for node-fetch (npm) Jan 21, 2022
kurt-r2c
Information Disclosure in Guava Low
CVE-2020-8908 was published for com.google.guava:guava (Maven) Mar 25, 2021
joshbressers
ProTip! Advisories are also available from the GraphQL API