GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,467
Erlang
33
GitHub Actions
23
Go
2,172
Maven
5,000+
npm
3,832
NuGet
696
pip
3,508
Pub
12
RubyGems
910
Rust
907
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
378 advisories
Filter by severity
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS...
Moderate
Unreviewed
CVE-2024-54507
was published
Jan 28, 2025
Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2025-2015
was published
Mar 11, 2025
Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2025-2018
was published
Mar 11, 2025
Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2025-2022
was published
Mar 11, 2025
Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability. This...
High
Unreviewed
CVE-2025-2016
was published
Mar 11, 2025
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to...
High
Unreviewed
CVE-2025-1920
was published
Mar 10, 2025
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to...
High
Unreviewed
CVE-2025-2135
was published
Mar 10, 2025
jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c.
High
Unreviewed
CVE-2024-53427
was published
Feb 26, 2025
A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness...
Low
Unreviewed
CVE-2023-1075
was published
Mar 27, 2023
An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible type...
Moderate
Unreviewed
CVE-2024-37603
was published
Feb 14, 2025
: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark...
High
Unreviewed
CVE-2024-11346
was published
Feb 13, 2025
A type confusion vulnerability has been identified in the Postscript interpreter in various...
High
Unreviewed
CVE-2024-11344
was published
Feb 13, 2025
Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to...
High
Unreviewed
CVE-2025-0291
was published
Jan 8, 2025
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
High
Unreviewed
CVE-2012-0507
was published
May 4, 2022
A remote code execution vulnerability exists in the way that the scripting engine handles objects...
High
Unreviewed
CVE-2019-0752
was published
May 13, 2022
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...
Moderate
Unreviewed
CVE-2019-17026
was published
May 24, 2022
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...
High
Unreviewed
CVE-2019-11707
was published
May 24, 2022
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
High
Unreviewed
CVE-2025-21342
was published
Feb 7, 2025
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
High
Unreviewed
CVE-2025-21408
was published
Feb 7, 2025
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Moderate
Unreviewed
CVE-2025-21279
was published
Feb 7, 2025
In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent...
High
Unreviewed
CVE-2024-40676
was published
Jan 28, 2025
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and...
High
Unreviewed
CVE-2023-32439
was published
Jun 23, 2023
A type confusion issue was addressed with improved checks. This issue is fixed in visionOS 2.3,...
High
Unreviewed
CVE-2025-24129
was published
Jan 28, 2025
Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to...
High
Unreviewed
CVE-2025-0147
was published
Jan 30, 2025
Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to...
High
Unreviewed
CVE-2021-30563
was published
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API