Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

436 advisories

Loading
containerd user ID handling bypass allows runAsNonRoot evasion High
CVE-2026-46680 was published for github.com/containerd/containerd (Go) May 21, 2026
ssst0n3 Credited to ssst0n3
Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a... High Unreviewed
CVE-2026-9117 was published May 20, 2026
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to... High Unreviewed
CVE-2026-8540 was published May 14, 2026
Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an... High Unreviewed
CVE-2026-35417 was published May 12, 2026
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function... High Unreviewed
CVE-2026-34344 was published May 12, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and... High Unreviewed
CVE-2026-28983 was published May 11, 2026
free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types High
CVE-2026-44325 was published for github.com/free5gc/nrf (Go) May 8, 2026
LinZiyuu Credited to LinZiyuu
@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input High
CVE-2026-44728 was published for @babel/plugin-transform-modules-systemjs (npm) May 8, 2026
JLHwung Credited to JLHwung, daniel-msft, and nicolo-ribaudo daniel-msft daniel-msft
nicolo-ribaudo nicolo-ribaudo
Type Confusion in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to... High Unreviewed
CVE-2026-7988 was published May 6, 2026
Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a... High Unreviewed
CVE-2026-7914 was published May 6, 2026
Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to... High Unreviewed
CVE-2026-7927 was published May 6, 2026
Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to... High Unreviewed
CVE-2026-7337 was published Apr 29, 2026
In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type... High Unreviewed
CVE-2026-31502 was published Apr 22, 2026
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to... High Unreviewed
CVE-2026-6301 was published Apr 15, 2026
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to... High Unreviewed
CVE-2026-6307 was published Apr 15, 2026
Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to... High Unreviewed
CVE-2026-6363 was published Apr 15, 2026
Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using... High Unreviewed
CVE-2026-27298 was published Apr 15, 2026
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean High
CVE-2026-40683 was published for keystone (pip) Apr 14, 2026
Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized... High Unreviewed
CVE-2026-26162 was published Apr 14, 2026
Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution... High Unreviewed
CVE-2026-5496 was published Apr 11, 2026
Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a... High Unreviewed
CVE-2026-5914 was published Apr 9, 2026
Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute... High Unreviewed
CVE-2026-5871 was published Apr 9, 2026
Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute... High Unreviewed
CVE-2026-5865 was published Apr 9, 2026
The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op... High Unreviewed
CVE-2026-27144 was published Apr 8, 2026
A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received... High Unreviewed
CVE-2026-21710 was published Mar 30, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database