---
title: "Critical advisories by ecosystem"
url: https://erroneo.us/security/ecosystem/
description: "Critical GitHub-reviewed advisories since October 2023 across 11 package ecosystems: npm, PyPI, Maven, Go, Composer and more, with fixed versions."
type: security-ecosystem-index
section: "Security Digest"
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Critical advisories by ecosystem

- [npm](https://erroneo.us/security/ecosystem/npm/index.md): 499
- [PyPI](https://erroneo.us/security/ecosystem/pypi/index.md): 451
- [Go](https://erroneo.us/security/ecosystem/go/index.md): 391
- [Maven](https://erroneo.us/security/ecosystem/maven/index.md): 334
- [Composer (PHP)](https://erroneo.us/security/ecosystem/composer/index.md): 244
- [crates.io (Rust)](https://erroneo.us/security/ecosystem/crates/index.md): 65
- [RubyGems](https://erroneo.us/security/ecosystem/rubygems/index.md): 33
- [NuGet](https://erroneo.us/security/ecosystem/nuget/index.md): 32
- [GitHub Actions](https://erroneo.us/security/ecosystem/actions/index.md): 12
- [Swift](https://erroneo.us/security/ecosystem/swift/index.md): 6
- [Hex (Erlang/Elixir)](https://erroneo.us/security/ecosystem/hex/index.md): 6

---
Source page: https://erroneo.us/security/ecosystem/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt