Open-source security advisory
vulnerability.advisory_published · Ready Open-source security advisories, worldwide
What it is
Public: from open or licensed sources, shared by everyone who subscribes.
- Example: GHSA-7x2q-4m9c-hv3p (high): Path traversal in nordvik-uploads
- Typed payload, validated by its JSON Schema
- Collected today from Open-source security advisories (worldwide)
Each event names its exact source, a link to the record, the licence and the attribution in its provenance.
Used for
Example event, standard format
{
"specversion": "1.0",
"id": "evt_01M5EV0NM00HKHAMKN1GPY5B5S",
"type": "vulnerability.advisory_published",
"source": "/sources/examples/vulnerability",
"time": "2026-10-21T09:00:00Z",
"observed_at": "2026-10-21T09:00:42Z",
"dataschema": "https://schemas.worldsignals.dev/vulnerability.advisory_published/1.json",
"datacontenttype": "application/json",
"visibility": "public",
"country": "XX",
"subject": {
"kind": "vulnerability",
"name": "GHSA-7x2q-4m9c-hv3p",
"ids": {
"ghsa": "GHSA-7x2q-4m9c-hv3p"
},
"ws_id": "ent_01M5EV0NM0KS2TDJS3SXMNM9T9"
},
"entities": [
{
"kind": "product",
"role": "affected",
"name": "npm:nordvik-uploads"
}
],
"title": "GHSA-7x2q-4m9c-hv3p (high): Path traversal in nordvik-uploads",
"data": {
"ghsa_id": "GHSA-7x2q-4m9c-hv3p",
"summary": "Path traversal in nordvik-uploads",
"severity": "high",
"cvss": {
"score": 8.1,
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
"cwe": [
"CWE-22"
],
"packages": [
{
"ecosystem": "npm",
"name": "nordvik-uploads",
"vulnerable_range": "< 2.4.1",
"patched_version": "2.4.1"
}
]
},
"provenance": {
"source_id": "example",
"source_name": "Example data",
"url": "https://example.com/worldsignals/vulnerability.advisory_published",
"licence": "Example only, not a real record",
"method": "example"
},
"confidence": 0.95,
"personal_data": false,
"revision": 1,
"tags": [
"example",
"npm",
"high"
]
}Give your agents something to notice
Join the waiting list, free during early access. Pick these events and we’ll email you when you’re in.