Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,255
Erlang
31
GitHub Actions
21
Go
2,021
Maven
5,000+
npm
3,728
NuGet
662
pip
3,406
Pub
12
RubyGems
890
Rust
862
Swift
36
Unreviewed advisories
All unreviewed
5,000+

184 advisories

Loading
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue... High Unreviewed
CVE-2018-4219 was published May 14, 2022
Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0... High Unreviewed
CVE-2018-12453 was published May 14, 2022
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability.... High Unreviewed
CVE-2018-5007 was published May 14, 2022
Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote... High Unreviewed
CVE-2017-15413 was published May 14, 2022
The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as... High Unreviewed
CVE-2016-5161 was published May 14, 2022
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an... High Unreviewed
CVE-2018-12386 was published May 14, 2022
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the... High Unreviewed
CVE-2018-5861 was published May 14, 2022
In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type... High Unreviewed
CVE-2018-9490 was published May 14, 2022
In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain... High Unreviewed
CVE-2018-19134 was published May 14, 2022
In iOS before 11.2, a type confusion issue was addressed with improved memory handling. High Unreviewed
CVE-2017-13888 was published May 14, 2022
Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282... High Unreviewed
CVE-2018-6056 was published May 14, 2022
Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a... High Unreviewed
CVE-2018-6124 was published May 14, 2022
A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 ... High Unreviewed
CVE-2018-7813 was published May 14, 2022
A Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 ... High Unreviewed
CVE-2018-7815 was published May 14, 2022
Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability.... High Unreviewed
CVE-2018-4945 was published May 14, 2022
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11... High Unreviewed
CVE-2018-4246 was published May 14, 2022
An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be... High Unreviewed
CVE-2018-16511 was published May 14, 2022
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and... High Unreviewed
CVE-2017-11221 was published May 14, 2022
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and... High Unreviewed
CVE-2017-11257 was published May 14, 2022
A type confusion issue was addressed with improved memory handling. This issue affected versions... High Unreviewed
CVE-2018-4285 was published May 14, 2022
A type confusion issue was addressed with improved memory handling. This issue affected versions... High Unreviewed
CVE-2018-4284 was published May 14, 2022
An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a... High Unreviewed
CVE-2019-5757 was published May 14, 2022
psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access... High Unreviewed
CVE-2018-19476 was published May 14, 2022
psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended... High Unreviewed
CVE-2018-19477 was published May 14, 2022
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0... High Unreviewed
CVE-2018-6064 was published May 14, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database