GitHub Advisory Database Overwhelmed by Record Vulnerability Reports

• •GitHub Advisory Database published 1,560 advisories in May 2026, a record high.
• •The volume of incoming vulnerability reports is overwhelming the review process.
• •Delays in publishing advisories could leave critical software systems vulnerable.

In May 2026, the GitHub Advisory Database published a record 1,560 reviewed security advisories, significantly exceeding its typical monthly output. This surge in vulnerability reports is straining the review system, causing delays in publishing new advisories. The rapid increase reflects a broader shift in the global vulnerability disclosure ecosystem, impacting millions of open-source projects that rely on these alerts. Despite the high volume of advisories published, GitHub is struggling to keep pace with incoming reports, which could lead to unaddressed vulnerabilities in critical software systems. The situation highlights the challenges faced by platforms tasked with managing security disclosures in a rapidly evolving threat landscape.