Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
122
GitHub Actions
57
Go
5,000+
Maven
5,000+
npm
5,000+
NuGet
1,188
pip
5,000+
Pub
14
RubyGems
1,167
Rust
1,625
Swift
64
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
2
Go
20
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,581
Rust
21

184 advisories

Loading
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017... Moderate Unreviewed
CVE-2019-8252 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017... Moderate Unreviewed
CVE-2019-8251 was published May 24, 2022
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13... Moderate Unreviewed
CVE-2020-9800 was published May 24, 2022
Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6468 was published May 24, 2022
Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6464 was published May 24, 2022
Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6430 was published May 24, 2022
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13... Moderate Unreviewed
CVE-2020-3901 was published May 24, 2022
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a... Moderate Unreviewed
CVE-2019-17026 was published May 24, 2022
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6418 was published May 24, 2022
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6383 was published May 24, 2022
Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6382 was published May 24, 2022
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena... Moderate Unreviewed
CVE-2019-13519 was published May 24, 2022
Multiple memory corruption issues were addressed with improved memory handling. This issue is... Moderate Unreviewed
CVE-2019-8597 was published May 24, 2022
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to... Moderate Unreviewed
CVE-2019-13764 was published May 24, 2022
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to... Moderate Unreviewed
CVE-2019-13730 was published May 24, 2022
In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a... Moderate Unreviewed
CVE-2019-19391 was published May 24, 2022
Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing... Moderate Unreviewed
CVE-2011-2875 was published May 13, 2022
Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac,... Moderate Unreviewed
CVE-2017-5094 was published May 13, 2022
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to... Moderate Unreviewed
CVE-2012-4512 was published Apr 23, 2022
`CHECK`-failures in binary ops in Tensorflow Moderate
CVE-2022-23583 was published for tensorflow (pip) Feb 10, 2022
Lua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in funcnamefromcode function in ldebug... Moderate Unreviewed
CVE-2021-44647 was published Jan 12, 2022
There is a Vulnerability of accessing resources using an incompatible type (type confusion) in... Moderate Unreviewed
CVE-2021-40037 was published Jan 11, 2022
Prototype Pollution in dotty Moderate
CVE-2021-23624 was published for dotty (npm) Nov 8, 2021
Prototype Pollution in node-jsonpointer Moderate
CVE-2021-23807 was published for jsonpointer (npm) Nov 8, 2021
Prototype Pollution in json-ptr Moderate
CVE-2021-23509 was published for json-ptr (npm) Nov 8, 2021
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database