About
The Julia Ecosystem Security Advisory Database is the canonical source of security advisories for packages in the Julia ecosystem. It covers all packages registered in the General registry, the Julia standard libraries, and Julia itself.
Goals
Be the database of security advisories for the Julia package ecosystem
Provide structure for authoring, reviewing, and maintaining advisories
Export advisories in the standard OSV format for downstream consumers
Search and import applicable advisories from upstream databases (NVD, EUVD, GitHub)
Contributing
Anyone can submit or update advisories via pull request. See the contributing guide for details, the advisory schema for the file format, and the publication workflow for an overview of the full advisory lifecycle. Report any potentially-exploitable security issues privately, either following the package security policy (if it has one), contacting the maintainer(s) directly, or by mailing security@julialang.org.
Data Export
All advisories are automatically exported to OSV-compliant JSON on the generated/osv branch. Pull request CI validates the conversion before merging.