Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,583
Rust
21

825 advisories

Loading
Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker... High Unreviewed
CVE-2018-6122 was published May 24, 2022
An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote... High Unreviewed
CVE-2021-40871 was published May 24, 2022
A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF... High Unreviewed
CVE-2020-13547 was published May 24, 2022
core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome... High Unreviewed
CVE-2014-1731 was published May 17, 2022
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow Moderate
CVE-2022-29209 was published for tensorflow (pip) May 24, 2022
Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to... High Unreviewed
CVE-2022-3652 was published Nov 2, 2022
Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847... High Unreviewed
CVE-2014-1730 was published May 17, 2022
A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS... High Unreviewed
CVE-2022-32814 was published Sep 25, 2022
Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to... High Unreviewed
CVE-2022-3315 was published Nov 2, 2022
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe... High Unreviewed
CVE-2016-4149 was published May 13, 2022
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux,... High Unreviewed
CVE-2012-0752 was published May 14, 2022
Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash... High Unreviewed
CVE-2022-30557 was published May 12, 2022
Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and... High Unreviewed
CVE-2017-5059 was published May 13, 2022
Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac,... Moderate Unreviewed
CVE-2017-5094 was published May 13, 2022
Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and... High Unreviewed
CVE-2017-5057 was published May 13, 2022
Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and... High Unreviewed
CVE-2017-5108 was published May 13, 2022
Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0... High Unreviewed
CVE-2017-5116 was published May 13, 2022
Data races in model High
CVE-2020-36460 was published for model (Rust) Aug 25, 2021
Passing in a non-string 'html' argument can lead to unsanitized output Moderate
CVE-2021-32696 was published for striptags (npm) Jun 18, 2021
erik-krogh Credited to erik-krogh
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in... High Unreviewed
CVE-2018-8279 was published May 13, 2022
Prototype Pollution in jointjs Moderate
CVE-2021-23444 was published for jointjs (npm) Sep 22, 2021
Cross-site Scripting in teddy Moderate
CVE-2021-23447 was published for teddy (npm) Oct 12, 2021
Prototype Pollution in json-ptr Moderate
CVE-2021-23509 was published for json-ptr (npm) Nov 8, 2021
Clarify Content-Type handling Low
CVE-2021-41190 was published for github.com/opencontainers/distribution-spec (Go) Nov 18, 2021
jonjohnsonjr Credited to jonjohnsonjr
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of... Critical Unreviewed
CVE-2019-10231 was published May 13, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database