Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

528 advisories

Loading
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)... High Unreviewed
CVE-2026-96187 was published Oct 29, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)... High Unreviewed
CVE-2026-62765 was published Oct 28, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)... High Unreviewed
CVE-2026-85898 was published Oct 27, 2026
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in... High Unreviewed
CVE-2026-114598 was published Oct 27, 2026
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari... High Unreviewed
CVE-2026-112659 was published Oct 26, 2026
Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low... High Unreviewed
CVE-2026-116489 was published Oct 26, 2026
Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a... High Unreviewed
CVE-2026-113055 was published Oct 21, 2026
A type confusion issue was addressed with improved state management. This issue is fixed in... High Unreviewed
CVE-2026-86922 was published Oct 20, 2026
Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute... High Unreviewed
CVE-2026-110140 was published Oct 14, 2026
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an... High Unreviewed
CVE-2026-85377 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows Input System allows an... High Unreviewed
CVE-2026-83763 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in DNS Server allows an... High Unreviewed
CVE-2026-83642 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function... High Unreviewed
CVE-2026-70245 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function... High Unreviewed
CVE-2026-70225 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function... High Unreviewed
CVE-2026-70205 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an... High Unreviewed
CVE-2026-70051 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an... High Unreviewed
CVE-2026-69926 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an... High Unreviewed
CVE-2026-69880 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an... High Unreviewed
CVE-2026-102869 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows StateRepository API... High Unreviewed
CVE-2026-102216 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in RPC Runtime allows an... High Unreviewed
CVE-2026-102203 was published Oct 13, 2026
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in... High Unreviewed
CVE-2026-109733 was published Oct 13, 2026
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in... High Unreviewed
CVE-2026-109720 was published Oct 13, 2026
Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure High
CVE-2026-76216 was published for code.vikunja.io/api (Go) Oct 9, 2026
manus-use Credited to manus-use and zuhairhalawa zuhairhalawa zuhairhalawa
A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in... High Unreviewed
CVE-2026-107911 was published Oct 9, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database