Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

689 advisories

Loading
Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys... High Unreviewed
CVE-2026-9334 was published Jun 3, 2026
FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet... Moderate Unreviewed
CVE-2026-48682 was published Jun 2, 2026
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in... Moderate Unreviewed
CVE-2026-10702 was published Jun 2, 2026
tar has a PAX header desynchronization issue Moderate
GHSA-3pv8-6f4r-ffg2 was published for tar (Rust) May 29, 2026
woodruffw Credited to woodruffw
astral-tokio-tar has a PAX Header Desynchronization issue Moderate
GHSA-3cv2-h65g-fgmm was published for astral-tokio-tar (Rust) May 29, 2026
woodruffw Credited to woodruffw
Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to... High Unreviewed
CVE-2026-9983 was published May 29, 2026
Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a... High Unreviewed
CVE-2026-10022 was published May 29, 2026
containerd user ID handling bypass allows runAsNonRoot evasion High
CVE-2026-46680 was published for github.com/containerd/containerd (Go) May 21, 2026
ssst0n3 Credited to ssst0n3
Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a... High Unreviewed
CVE-2026-9117 was published May 20, 2026
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain... Moderate Unreviewed
CVE-2026-8570 was published May 14, 2026
Type Confusion in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote... Low Unreviewed
CVE-2026-8554 was published May 14, 2026
Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to... High Unreviewed
CVE-2026-8540 was published May 14, 2026
TanStack Start - Server Core: Inbound server-function request deserialization could invoke a sibling client-referenced server function Moderate
GHSA-9m65-766c-r333 was published for @tanstack/start-server-core (npm) May 14, 2026
mufeedvh Credited to mufeedvh
Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an... High Unreviewed
CVE-2026-35417 was published May 12, 2026
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function... High Unreviewed
CVE-2026-34344 was published May 12, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and... High Unreviewed
CVE-2026-28983 was published May 11, 2026
free5GC NRF: type-confusion panic in POST /oauth2/token structured-form parser via Reflect.Set on incompatible types High
CVE-2026-44325 was published for github.com/free5gc/nrf (Go) May 8, 2026
LinZiyuu Credited to LinZiyuu
@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input High
CVE-2026-44728 was published for @babel/plugin-transform-modules-systemjs (npm) May 8, 2026
JLHwung Credited to JLHwung, daniel-msft, and nicolo-ribaudo daniel-msft daniel-msft
nicolo-ribaudo nicolo-ribaudo
Type Confusion in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to... High Unreviewed
CVE-2026-7988 was published May 6, 2026
Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a... High Unreviewed
CVE-2026-7914 was published May 6, 2026
Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to... High Unreviewed
CVE-2026-7927 was published May 6, 2026
astral-tokio-tar is Vulnerable to PAX Header Desynchronization Moderate
GHSA-fp55-jw48-c537 was published for astral-tokio-tar (Rust) May 6, 2026
LawnGnome Credited to LawnGnome and woodruffw woodruffw woodruffw
In mutt before 2.3.2, the imap_auth_gss security level is mishandled. Low Unreviewed
CVE-2026-43862 was published May 4, 2026
In slbc, there is a possible out of bounds write due to type confusion. This could lead to local... Moderate Unreviewed
CVE-2026-20451 was published May 4, 2026
In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[]... Critical Unreviewed
CVE-2026-43038 was published May 1, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database