GitHub Advisory Database Hits Record Vulnerability Reports Amid Increased Complexity

Record Advisories Published

In May 2026, the GitHub Advisory Database reported 1,560 reviewed advisories, marking the highest output in its history. This figure represents over five times the typical monthly output, illustrating a significant surge in vulnerability reporting across the platform.

Shift in Vulnerability Ecosystem

The past few months have seen a fundamental shift in the vulnerability ecosystem, with coinciding increases in private vulnerability reports, repository advisories, and CVE requests. This heightened activity has pushed the advisory database to operate on a larger scale, creating challenges in processing and reviewing advisories.

Impact on Advisory Review Process

Due to the volume and complexity of new vulnerabilities, review times for adding new advisories have increased, although the quality of advisories remains consistent. Reviewed advisories continue to be human-validated, ensuring that existing alerts operate normally.

Community Engagement and Best Practices

GitHub urges users to assist by submitting comprehensive vulnerability data and coordinating with maintainers and researchers. It encourages requesting CVEs only when there is a clear intent to publish, helping to streamline the advisory review process.