Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Filter advisories

Unreviewed advisories

Malware advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
108
GitHub Actions
54
Go
4,509
Maven
5,000+
npm
5,000+
NuGet
1,100
pip
5,000+
Pub
13
RubyGems
1,145
Rust
1,511
Swift
62
Unreviewed advisories
All unreviewed
5,000+
Malware advisories
All malware
5,000+
Composer
1
Go
18
Maven
2
npm
5,000+
NuGet
264
pip
5,000+
RubyGems
3,510
Rust
10

442 advisories

Loading
Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2025-2022 was published Mar 11, 2025
Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2025-2016 was published Mar 11, 2025
Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2025-2015 was published Mar 11, 2025
Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2025-2018 was published Mar 11, 2025
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to... High Unreviewed
CVE-2025-1920 was published Mar 10, 2025
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to... High Unreviewed
CVE-2025-2135 was published Mar 10, 2025
jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c. High Unreviewed
CVE-2024-53427 was published Feb 26, 2025
: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark... High Unreviewed
CVE-2024-11346 was published Feb 13, 2025
A type confusion vulnerability has been identified in the Postscript interpreter in various... High Unreviewed
CVE-2024-11344 was published Feb 13, 2025
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21342 was published Feb 7, 2025
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21408 was published Feb 7, 2025
Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to... High Unreviewed
CVE-2025-0147 was published Jan 30, 2025
In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent... High Unreviewed
CVE-2024-40676 was published Jan 28, 2025
A type confusion issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4,... High Unreviewed
CVE-2025-24137 was published Jan 28, 2025
A type confusion issue was addressed with improved checks. This issue is fixed in visionOS 2.3,... High Unreviewed
CVE-2025-24129 was published Jan 28, 2025
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter High
CVE-2025-22153 was published for RestrictedPython (pip) Jan 23, 2025
icemac Credited to icemac, Nico-Posada, dataflake, and tseaver Nico-Posada Nico-Posada
dataflake dataflake tseaver tseaver
Internet Explorer Remote Code Execution Vulnerability High Unreviewed
CVE-2025-21326 was published Jan 14, 2025
Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to... High Unreviewed
CVE-2025-0291 was published Jan 8, 2025
Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2024-13047 was published Dec 30, 2024
Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This... High Unreviewed
CVE-2024-13049 was published Dec 30, 2024
Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability.... High Unreviewed
CVE-2024-12836 was published Dec 30, 2024
Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability.... High Unreviewed
CVE-2024-12834 was published Dec 30, 2024
TCPDF has incorrect comparison High
CVE-2024-56522 was published for tecnickcom/tcpdf (Composer) Dec 27, 2024
Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to... High Unreviewed
CVE-2024-12692 was published Dec 19, 2024
Windows Remote Desktop Services Remote Code Execution Vulnerability High Unreviewed
CVE-2024-49119 was published Dec 12, 2024
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database