Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

822 advisories

Loading
In multiple locations, there is a possible memory corruption due to type confusion. This could... High Unreviewed
CVE-2026-58854 was published Oct 5, 2026
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to... Moderate Unreviewed
CVE-2026-20587 was published Oct 5, 2026
Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute... High Unreviewed
CVE-2026-103625 was published Oct 2, 2026
devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validation High
GHSA-r9w8-h9r3-54w4 was published for devalue (npm) Oct 1, 2026
elliott-with-the-longest-name-on-github Credited to elliott-with-the-longest-name-on-github
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an... High Unreviewed
CVE-2026-47583 was published Sep 30, 2026
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a... High Unreviewed
CVE-2026-47569 was published Sep 30, 2026
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a... High Unreviewed
CVE-2026-47572 was published Sep 30, 2026
NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated... High Unreviewed
CVE-2026-47504 was published Sep 30, 2026
ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range Moderate
CVE-2026-101912 was published for ip-address (npm) Sep 29, 2026
waydeshi Credited to waydeshi
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute... High Unreviewed
CVE-2026-102321 was published Sep 29, 2026
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute... High Unreviewed
CVE-2026-102323 was published Sep 29, 2026
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute... High Unreviewed
CVE-2026-102328 was published Sep 29, 2026
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute... High Unreviewed
CVE-2026-102326 was published Sep 29, 2026
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute... High Unreviewed
CVE-2026-102299 was published Sep 29, 2026
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging... High Unreviewed
CVE-2026-95380 was published Sep 29, 2026
Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to... High Unreviewed
CVE-2026-95365 was published Sep 29, 2026
Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to... High Unreviewed
CVE-2026-95286 was published Sep 29, 2026
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame,... High Unreviewed
CVE-2026-102556 was published Sep 29, 2026
JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 157. Moderate Unreviewed
CVE-2026-100793 was published Sep 29, 2026
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in... High Unreviewed
CVE-2026-100792 was published Sep 29, 2026
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended... High Unreviewed
CVE-2026-97737 was published Sep 25, 2026
libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When... Moderate Unreviewed
CVE-2026-88383 was published Sep 24, 2026
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup... Critical Unreviewed
CVE-2026-94083 was published Sep 20, 2026
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging... High Unreviewed
CVE-2026-93377 was published Sep 17, 2026
Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker... High Unreviewed
CVE-2026-91741 was published Sep 15, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database