Pricing

from $5.50 / 1,000 advisory searches

Try for free

Go to Apify Store

GitHub Security Advisory Tracker: New GHSAs

Try for free

Track new GitHub Security Advisories (GHSA) by package ecosystem, package name, or severity. Get affected version ranges, patched versions, CVSS score, and CWE for open-source dependency vulnerabilities.

Pricing

from $5.50 / 1,000 advisory searches

Rating

0.0

(0)

Developer

Timothy Kelvin

Actor stats

Bookmarked

Total users

Monthly active users

7 days ago

Last modified

GitHub Security Advisory Tracker — New GHSA Advisories

Built for engineering and security teams watching for new vulnerabilities in the packages they depend on — GHSA advisories are ecosystem-curated (npm, pip, Maven, etc.) and often publish faster than the general NVD feed, with the affected/patched version ranges already structured.

Input

{
  "ecosystem": "npm",
  "packageName": "lodash",
  "severity": "all",
  "daysBack": 30,
  "maxResults": 25
}

Field	Type	Description
`ecosystem`	string	`"all"` or one of `npm`, `pip`, `maven`, `nuget`, `composer`, `rubygems`, `go`, `rust`, `actions`, `pub`, `swift`, `erlang`. Default `"all"`.
`packageName`	string (optional)	Limit to advisories affecting this specific package.
`severity`	string	`"all"`, `"low"`, `"medium"`, `"high"`, or `"critical"` — exact match, not a threshold. Default `"all"`.
`daysBack`	number	How many days back from today to search, by publish date. Default `30`, max `365`.
`maxResults`	number	Max advisories to return, most recently published first. Default `25`, max `100`.

Output

One record per advisory:

{
  "ghsaId": "GHSA-r5fr-rjxr-66jc",
  "cveId": "CVE-2026-XXXXX",
  "summary": "lodash vulnerable to Code Injection via `_.template` imports key names",
  "severity": "high",
  "cvssScore": 8.4,
  "cweIds": ["CWE-94"],
  "affectedPackages": [
    {
      "ecosystem": "npm",
      "name": "lodash",
      "vulnerableVersionRange": "< 4.17.21",
      "firstPatchedVersion": "4.17.21"
    }
  ],
  "publishedAt": "2026-08-07T18:48:59Z",
  "updatedAt": "2026-08-07T18:48:59Z",
  "htmlUrl": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc"
}

summary is a one-line description; open htmlUrl for the full write-up (PoC, remediation detail), which isn't included here since advisory bodies can run to thousands of words.

A search with no matching advisories returns no items but is still billed once for the search.

How it works

Direct calls to the official GitHub Security Advisories REST API (api.github.com/advisories) — no proxy, no key, no scraping.

Pricing note

Billed per search, not per advisory returned — one charge whether the search returns 0 advisories or 100.

npm Package Update Tracker: new versions/deprecations for a package you depend on
CVE Tracker: the broader NVD/CVE database, not scoped to a package ecosystem

GitHub Scraper

muscular_quadruplet/github-scraper

Scrape GitHub repositories, users, stars, forks. Extract trending repos, developer profiles, code stats. Monitor open source projects, find contributors, analyze tech stacks. No API limits.

Do It

5.0

(1)

GitHub Security Advisories Scraper

maximedupre/github-security-advisories-scraper

GitHub Security Advisories Scraper for GHSA feeds, CVE lookup, package lookup, severity filters, CVSS, EPSS, CWE, fixed versions, references, credits, and advisory timestamps.

Maxime Dupré

GitHub Security Advisories Scraper

parseforge/github-security-advisories-scraper

Scrapes GitHub Security Advisories by GHSA ID, CVE, ecosystem, severity, CWE, or date range. Returns each advisory as a flat row with description, affected packages, CVSS scores, and references. Export to CSV, JSON, Excel, or XML.

ParseForge

Security Advisory Vendor Risk Monitor

seeb/security-advisory-vendor-risk-monitor

Monitor security advisories for vendor-risk signals such as CVE, affected product, severity, vulnerable versions, fix version, and mitigation.

Techionik

npm Package Update Tracker: Versions & Deprecations

m_ctim/npm-package-tracker

Track new published versions and deprecation warnings for npm packages you depend on. Get the version, publish date, and deprecation status the moment it changes. For engineering and security teams monitoring dependencies without checking npm by hand.

Timothy Kelvin

GitHub Release Tracker: New Versions & Changelogs

m_ctim/github-release-tracker

Track new releases for the GitHub repos your team depends on. Get the version tag, changelog, publish date, and release URL the moment a new one ships — for engineering and security teams who can't check every repo by hand.

Timothy Kelvin

New Clinical Trials Tracker by Sponsor & Condition

m_ctim/clinical-trial-tracker

Search newly posted clinical trials by sponsor, condition, phase, status, or country. A new trial start is a buying signal for CROs, lab suppliers, and patient recruitment services.

Timothy Kelvin

New GitHub Repos Finder by Topic & Language

m_ctim/github-repo-discovery-tracker

Find new GitHub repositories matching a keyword, language, or topic, created within a chosen time window and sorted by stars. For tech scouting, VC deal sourcing, and tracking what's emerging in an OSS ecosystem.

Timothy Kelvin

Trivy Security Scanner

ayeeyee/trivy-security-scanner

Scan a container image or git repository for CVEs, exposed secrets, and misconfigurations using Trivy, the open-source scanner trusted across the container security ecosystem. Severity-scored findings, Critical to Negligible. $0.99 per completed scan; failed scans are never charged.

Virtual Footprint LLC

SEC 13F Tracker: Institutional Holdings Filings

m_ctim/sec-13f-institutional-holdings-tracker

Track new SEC Form 13F-HR filings, the quarterly disclosure large institutional investment managers must file listing their U.S. equity holdings. Search by manager name or a company they might hold.

Timothy Kelvin