Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,580
Rust
21

184 advisories

Loading
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)... Moderate Unreviewed
CVE-2026-88090 was published Oct 29, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and... Moderate Unreviewed
CVE-2026-112547 was published Oct 26, 2026
Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type Moderate
CVE-2026-115892 was published for wasmtime (Rust) Oct 23, 2026
Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that... Moderate Unreviewed
CVE-2026-114115 was published Oct 21, 2026
A logic issue was addressed with improved state management. This issue is fixed in Safari 27,... Moderate Unreviewed
CVE-2026-86872 was published Oct 20, 2026
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a... Moderate Unreviewed
CVE-2026-0314 was published Oct 14, 2026
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue... Moderate Unreviewed
CVE-2026-96921 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows Device Association... Moderate Unreviewed
CVE-2026-96854 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows Portable Device File... Moderate Unreviewed
CVE-2026-83664 was published Oct 13, 2026
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode... Moderate Unreviewed
CVE-2026-70017 was published Oct 13, 2026
For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of... Moderate Unreviewed
CVE-2026-79611 was published Oct 13, 2026
RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual... Moderate Unreviewed
CVE-2026-108952 was published Oct 12, 2026
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to... Moderate Unreviewed
CVE-2026-20587 was published Oct 5, 2026
ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range Moderate
CVE-2026-101912 was published for ip-address (npm) Sep 29, 2026
waydeshi Credited to waydeshi
JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 157. Moderate Unreviewed
CVE-2026-100793 was published Sep 29, 2026
libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When... Moderate Unreviewed
CVE-2026-88383 was published Sep 24, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and... Moderate Unreviewed
CVE-2026-84602 was published Sep 14, 2026
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS... Moderate Unreviewed
CVE-2026-84635 was published Sep 14, 2026
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26... Moderate Unreviewed
CVE-2026-65409 was published Sep 14, 2026
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read... Moderate Unreviewed
CVE-2026-87564 was published Sep 9, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an... Moderate Unreviewed
CVE-2026-81401 was published Sep 8, 2026
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead... Moderate Unreviewed
CVE-2026-20508 was published Sep 7, 2026
BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS... Moderate Unreviewed
CVE-2026-80185 was published Aug 26, 2026
The Lean 4 kernel does not verify that the structure named in a projection expression matches the... Moderate Unreviewed
CVE-2026-72844 was published Aug 20, 2026
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in... Moderate Unreviewed
CVE-2026-74976 was published Aug 18, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database