Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,205
Erlang
31
GitHub Actions
19
Go
1,988
Maven
5,000+
npm
3,704
NuGet
661
pip
3,332
Pub
11
RubyGems
884
Rust
845
Swift
36
Unreviewed advisories
All unreviewed
5,000+

89 advisories

Loading
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to... Moderate Unreviewed
CVE-2012-4512 was published Apr 23, 2022
There is a Vulnerability of accessing resources using an incompatible type (type confusion) in... Moderate Unreviewed
CVE-2021-40037 was published Jan 11, 2022
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13... Moderate Unreviewed
CVE-2020-9800 was published May 24, 2022
Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing... Moderate Unreviewed
CVE-2011-2875 was published May 13, 2022
Prototype Pollution in dotty Moderate
CVE-2021-23624 was published for dotty (npm) Nov 8, 2021
Prototype Pollution in node-jsonpointer Moderate
CVE-2021-23807 was published for jsonpointer (npm) Nov 8, 2021
Prototype Pollution in json-ptr Moderate
CVE-2021-23509 was published for json-ptr (npm) Nov 8, 2021
Cross-site Scripting in teddy Moderate
CVE-2021-23447 was published for teddy (npm) Oct 12, 2021
Prototype Pollution in jointjs Moderate
CVE-2021-23444 was published for jointjs (npm) Sep 22, 2021
Passing in a non-string 'html' argument can lead to unsanitized output Moderate
CVE-2021-32696 was published for striptags (npm) Jun 18, 2021
erik-krogh
Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac,... Moderate Unreviewed
CVE-2017-5094 was published May 13, 2022
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow Moderate
CVE-2022-29209 was published for tensorflow (pip) May 24, 2022
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type... Moderate Unreviewed
CVE-2022-3676 was published Oct 24, 2022
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type... Moderate Unreviewed
CVE-2021-31317 was published May 24, 2022
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type... Moderate Unreviewed
CVE-2021-31318 was published May 24, 2022
In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead... Moderate Unreviewed
CVE-2021-0352 was published May 24, 2022
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer... Moderate Unreviewed
CVE-2021-25177 was published May 24, 2022
In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to... Moderate Unreviewed
CVE-2020-0336 was published May 24, 2022
Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6533 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017... Moderate Unreviewed
CVE-2019-8250 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017... Moderate Unreviewed
CVE-2019-8249 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017... Moderate Unreviewed
CVE-2019-8251 was published May 24, 2022
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017... Moderate Unreviewed
CVE-2019-8252 was published May 24, 2022
Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6464 was published May 24, 2022
Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to... Moderate Unreviewed
CVE-2020-6468 was published May 24, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database