Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,508
Maven
5,000+
npm
5,000+
NuGet
1,091
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

689 advisories

Loading
Microsoft Office Graphics Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021... High Unreviewed
CVE-2021-38658 was published May 24, 2022
Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache... Critical Unreviewed
CVE-2026-71558 was published Aug 7, 2026
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An... High Unreviewed
CVE-2026-14644 was published Aug 7, 2026
API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion) Moderate
CVE-2026-54164 was published for api-platform/core (Composer) Aug 7, 2026
alexandre-daubois Credited to alexandre-daubois
A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The ... High Unreviewed
CVE-2026-15572 was published Aug 5, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)... High Unreviewed
CVE-2026-66321 was published Aug 4, 2026
Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote... Moderate Unreviewed
CVE-2026-17866 was published Jul 30, 2026
Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute... High Unreviewed
CVE-2026-17725 was published Jul 30, 2026
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to... Critical Unreviewed
CVE-2026-17697 was published Jul 30, 2026
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had... Critical Unreviewed
CVE-2026-17687 was published Jul 30, 2026
Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute... High Unreviewed
CVE-2026-17989 was published Jul 30, 2026
Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a... High Unreviewed
CVE-2026-17948 was published Jul 30, 2026
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[]... Critical Unreviewed
CVE-2026-43037 was published May 1, 2026
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS... Critical Unreviewed
CVE-2026-64727 was published Jul 27, 2026
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS... Critical Unreviewed
CVE-2026-64704 was published Jul 27, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.6 and... Moderate Unreviewed
CVE-2026-64693 was published Jul 27, 2026
Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities High
CVE-2026-55771 was published for com.cedarpolicy:cedar-java (Maven) Jul 28, 2026
CedarJava has type confusion vulnerability High
CVE-2026-55772 was published for com.cedarpolicy:cedar-java (Maven) Jun 19, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2,... High Unreviewed
CVE-2026-43705 was published Jun 29, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and... High Unreviewed
CVE-2026-28983 was published May 11, 2026
seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization Critical
CVE-2026-59940 was published for seroval (npm) Jul 24, 2026
mufeedvh Credited to mufeedvh
Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to... High Unreviewed
CVE-2026-16420 was published Jul 22, 2026
In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type... High Unreviewed
CVE-2026-31502 was published Apr 22, 2026
n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion High
GHSA-2x35-3fw4-9jr4 was published for n8n (npm) Jul 22, 2026
simonkoeck Credited to simonkoeck
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in... Critical Unreviewed
CVE-2026-16410 was published Jul 21, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database