osquery
Open osquery/osquery on GitHub
Repository description, written by its ownerSQL powered operating system instrumentation, monitoring, and analytics.
Active last commit 4 days ago
Commits in 38 of the last 52 weeks
- Latest release has downloads without a signature or checksum file
- Category
- Digital forensics
- Subcategory
- Live Forensics
- License
- Other (GitHub could not identify it)
- Latest release
- Release 5.23.1, Jun 24, 2026 (no signature or checksum file)
- Stars
- 23.7K
- GitHub repository id
- 22394357
- Listed in
- awesome-forensics (CC0-1.0)
- Last checked
- Oct 19, 2026
Security advisories
Advisories the maintainers published on GitHub. Vulnerabilities reported only elsewhere, for example in the NVD, are not included.
- GHSA-4r78-6hg6-33gg CVE-2026-54000 High Jul 1, 2026
Heap buffer overflow via `processes` table (Windows) - GHSA-hr28-jvpx-68cx CVE-2026-54001 High Jul 1, 2026
Heap buffer overflow via `authenticode` table (Windows) - GHSA-fg78-9q98-62hh CVE-2026-46388 Medium Jul 1, 2026
Unprivileged users can temporarily read file carve contents - GHSA-4g56-2482-x7q8 CVE-2020-26273 Medium Dec 15, 2020
sqlite ATTACH allows some filesystem access - GHSA-29q7-6g57-5vc6 CVE-2017-15028 Low Jul 10, 2020
known_hosts should drop privileges - GHSA-hx5j-mvj5-rq2m CVE-2017-15027 Low Jul 10, 2020
safari_extensions table should not use parent paths for privilege dropping - GHSA-3227-mxf9-vw74 CVE-2017-15026 Low Jul 10, 2020
ie_extensions table susceptible to SQL injection - GHSA-pjmv-4494-jx3f CVE-2020-1887 Low Jul 10, 2020
osquery does not validate TLS SNI hostname - GHSA-2xwp-8fv7-c5pm CVE-2020-11081 Low Jul 10, 2020
osquery susceptible to DLL search order hijacking of zlib1.dll
Changes seen by hackshelf
- Oct 19, 2026 First checked, status Active