GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
                  
                    
                      
                      All reviewed
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      Composer
                    
                    
                      4,968
                    
                  
                  
                    
                      
                      Erlang
                    
                    
                      39
                    
                  
                  
                    
                      
                      GitHub Actions
                    
                    
                      38
                    
                  
                  
                    
                      
                      Go
                    
                    
                      2,616
                    
                  
                  
                    
                      
                      Maven
                    
                    
                      5,000+
                    
                  
                  
                    
                      
                      npm
                    
                    
                      4,255
                    
                  
                  
                    
                      
                      NuGet
                    
                    
                      760
                    
                  
                  
                    
                      
                      pip
                    
                    
                      4,040
                    
                  
                  
                    
                      
                      Pub
                    
                    
                      12
                    
                  
                  
                    
                      
                      RubyGems
                    
                    
                      953
                    
                  
                  
                    
                      
                      Rust
                    
                    
                      1,050
                    
                  
                  
                    
                      
                      Swift
                    
                    
                      45
                    
                  
                  Unreviewed advisories
                  
                    
                      
                      All unreviewed
                    
                    
                      5,000+
                    
                  
            Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
      451 advisories
        Filter by severity
        
      
      
    
                    
                      Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-59231
                      
                      was published
                      Oct 14, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-59233
                      
                      was published
                      Oct 14, 2025 
                    
                  
                    
                      A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func...
                    
                      
  Low
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-11731
                      
                      was published
                      Oct 14, 2025 
                    
                  
                    
                      Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-10585
                      
                      was published
                      Sep 24, 2025 
                    
                  
                    
                      A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-8354
                      
                      was published
                      Sep 23, 2025 
                    
                  
                    
                      Ashlar-Vellum Cobalt LI File Parsing Type Confusion Remote Code Execution Vulnerability. This...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-8000
                      
                      was published
                      Sep 17, 2025 
                    
                  
                    
                      Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-8002
                      
                      was published
                      Sep 17, 2025 
                    
                  
                    
                      Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-8005
                      
                      was published
                      Sep 17, 2025 
                    
                  
                    
                      Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-7995
                      
                      was published
                      Sep 17, 2025 
                    
                  
                    
                      Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-7999
                      
                      was published
                      Sep 17, 2025 
                    
                  
                    
                      A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-43355
                      
                      was published
                      Sep 16, 2025 
                    
                  
                    
                      A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-43297
                      
                      was published
                      Sep 16, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Defender Firewall...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-54915
                      
                      was published
                      Sep 9, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Defender Firewall...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-54109
                      
                      was published
                      Sep 9, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Defender Firewall...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-54094
                      
                      was published
                      Sep 9, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Defender Firewall...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-54104
                      
                      was published
                      Sep 9, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Defender Firewall...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53810
                      
                      was published
                      Sep 9, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Defender Firewall...
                    
                      
  Moderate
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53808
                      
                      was published
                      Sep 9, 2025 
                    
                  
                    
                      Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2023-31322
                      
                      was published
                      Sep 6, 2025 
                    
                  
                    
                      Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau...
                    
                      
  Critical
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-26496
                      
                      was published
                      Aug 22, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Push Notifications...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53726
                      
                      was published
                      Aug 12, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Push Notifications...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53724
                      
                      was published
                      Aug 12, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Push Notifications...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53725
                      
                      was published
                      Aug 12, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53739
                      
                      was published
                      Aug 12, 2025 
                    
                  
                    
                      Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows...
                    
                      
  High
                      
                        Unreviewed
                    
                
                      
                        CVE-2025-53145
                      
                      was published
                      Aug 12, 2025 
                    
                  
        
        ProTip!
        Advisories are also available from the 
        GraphQL API