github/advisory-database

View on GitHub

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Stars: 2.5k
Forks: 772
Open beginner issues: 8
Indexed issues: 138
Avg merge: 3d 15h
Merged PRs (30d): 46

Dominant language: No language data
License: CC-BY-4.0
Last GitHub push: Sep 20, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

GHSA Malware advisory is missing some packages of Mastra supply chain attack campaign Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/advisory-database#8054 · Opened Jun 17, 2026
84 GHSAs reference CVE IDs with no record in cvelistV5, the CVE Services API, or NVD Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#8051 · 1 comment · Opened Jun 16, 2026
Missing Golang Vulnerabilities Data Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

github/advisory-database#8040 · 2 comments · Opened Jun 14, 2026
false positive: GHSA-4fm3-j964-p869 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#7997 · 1 reaction · Opened Jun 10, 2026
Proposal: Add MITRE CVE List V5 as an Advisory Data Source Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

github/advisory-database#7993 · 1 reaction · Opened Jun 10, 2026
[GHSA-78fc-9688-w8xw] Malformed CVSS4 vector Open

Difficulty 1/5 Under an hour Newbie friendliness 78/100

github/advisory-database#7882 · 1 comment · Opened Jun 3, 2026
[GHSA-xcjm-wqff-m669][CVE-2026-49219] Reassess severity - namespace bypass enables unauthenticated RCE on `--enable-pipes` builds, currently rated Medium (file read only) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#7875 · 2 comments · Opened Jun 2, 2026
[GHSA-jwvw-v7c5-m82h] file is not present in db Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

github/advisory-database#7827 · Opened May 29, 2026
CVSS ordering validation Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#7543 · Opened Apr 29, 2026
[GHSA-vffh-x6r8-xx99] [CVE-2026-40179] Doesn't show all remediated versions (particularly v3.5.2's go counterpart v0.305.2) Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

github/advisory-database#7537 · Opened Apr 28, 2026
Request to add supplemental reference for GHSA-45fq-w37p-qfw5 (CVE-2026-41177) Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

github/advisory-database#7505 · Opened Apr 25, 2026
RUSTSEC ingestion request: ignore advisories with `informational` field Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

github/advisory-database#7418 · 2 comments · 9 reactions · Opened Apr 16, 2026
[GHSA-8ffj-4hx4-9pgf] [CVE-2026-39413] - Request for CVSS correction or clarification Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

github/advisory-database#7373 · 1 comment · Opened Apr 12, 2026
[GHSA-rp9m-7r4c-75qg] [CVE-2026-35039] - Request for CVSS correction or clarification Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#7372 · 1 comment · Opened Apr 12, 2026
[GHSA-5ghq-42rg-769x] [CVE-2026-35035] - Request for CVSS correction or clarification Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#7371 · 1 comment · Opened Apr 12, 2026
[GHSA-cj4v-437j-jq4c] [CVE-2026-25921] - Request for CVSS correction or clarification Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/advisory-database#7370 · 1 comment · Opened Apr 12, 2026
some go advisories have invalid versions Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

github/advisory-database#7355 · Opened Apr 10, 2026
CVE Request: Cross-Site Scripting via isOn() bypass in Vue.js 3.x SSR (GHSA-5w45-w79q-rpqq) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#7300 · 1 comment · Opened Apr 4, 2026
EUVD support in GHSA Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#7285 · 4 reactions · Opened Apr 2, 2026
Adding GHSA from non ecosystem software Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

github/advisory-database#7268 · 2 comments · Opened Mar 31, 2026
Miscalculation of CVSS 3.1 score vs. NVD/FIRST CVSS calculator Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/advisory-database#7119 · 1 comment · Opened Mar 5, 2026
CVE-2026-22028 Significant scoring difference between GHSA<>NVD Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/advisory-database#6841 · 1 comment · Opened Feb 11, 2026
Change history for GHSA Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

github/advisory-database#6632 · 3 comments · 1 reaction · Opened Jan 9, 2026
Ingesting of Drupal advisory database Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#6437 · 1 comment · Opened Nov 18, 2025
Proposal: Add Attack Type Classification to Malware Advisories Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

github/advisory-database#6107 · 1 comment · 7 reactions · Opened Sep 10, 2025
Support Haskell ecosystem advisories Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#5858 · 2 comments · Opened Jul 27, 2025
question: how handle `affected[].ranges[].events` + `affectedversions-field` Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/advisory-database#5734 · 3 comments · 1 reaction · Opened Jun 19, 2025
Issues with monorepo CVE reporting Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#5437 · 1 comment · 1 reaction · Opened Apr 4, 2025
Removed ecosystem_specific field Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/advisory-database#5407 · 1 comment · 2 reactions · Opened Mar 26, 2025
CVSS 4.0 calculator on advisory improvement screen does not support non-base metrics Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

github/advisory-database#5357 · 1 comment · 2 reactions · Opened Mar 12, 2025
"Delete PR staging and head branches" workflow fails for PR merges by 'advisory-database' bot Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

github/advisory-database#5167 · Opened Jan 14, 2025
Stop creation of CVSS v4 by yourself Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/advisory-database#5058 · 1 reaction · Opened Dec 5, 2024
GraphQL API - a way to include unreviewed advisories Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

github/advisory-database#5052 · Opened Dec 4, 2024
Support for other Composer repository Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#4955 · 1 comment · 1 reaction · Opened Oct 29, 2024
Rename Erlang Ecosystem to Hex Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

github/advisory-database#4932 · Opened Oct 24, 2024
Add Sonatype OSS Index as data source for GHSA database Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#4924 · 2 reactions · Opened Oct 23, 2024
Potential Data Discrepancy in CVE Listings Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/advisory-database#4860 · 1 comment · Opened Oct 1, 2024
Add Spring Security Advisories as data source for GHSA database Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#4843 · 1 comment · 6 reactions · Opened Sep 25, 2024
Tomcat entry updates Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#4590 · 1 comment · Opened Jul 9, 2024
Many security_advisory.published failing webhook events originating from similar npm packages Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/advisory-database#4578 · 1 comment · Opened Jul 4, 2024
Request to review GHSA-gwr8-m965-83p4 Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/advisory-database#4336 · Opened May 2, 2024
Request to review GHSA-7jmm-gqgx-fq9m Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/advisory-database#4328 · Opened Apr 30, 2024
Haskell security advisory database (Hackage packages) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#4224 · 3 comments · 1 reaction · Opened Apr 10, 2024
List Perl as an environment Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/advisory-database#3536 · 11 comments · 73 reactions · Opened Feb 14, 2024
Repo specific advisories with CVE IDs don't make it into the global set Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/advisory-database#3266 · 3 comments · 5 reactions · Opened Jan 5, 2024
GHSA-rjhf-4mh8-9xjq is a duplicate of GHSA-3mv5-343c-w2qg Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/advisory-database#3085 · 3 comments · Opened Dec 19, 2023
Unable to improve advisory database for C / C++ packages Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#2963 · 8 comments · 10 reactions · Opened Nov 21, 2023
Does the advisory database cover other maven repositories? Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/advisory-database#2900 · 6 comments · Opened Oct 31, 2023
Need CVE auto-linking disambiguation to CVEs that belong to more than 1 project Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

github/advisory-database#2869 · 3 comments · 1 reaction · Opened Oct 19, 2023
Extend GitHub's CNA scope Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/advisory-database#2718 · 8 comments · 9 reactions · Opened Sep 10, 2023

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

github/advisory-database

Showing the newest 100

Get new issues in your inbox