EUVD-2025-25896

Malicious code in bioql PyPI...

EUVD-2025-4348

Malicious code in bioql PyPI...

EUVD-2023-54495

Malicious code in bioql PyPI...

EUVD-2022-24774

Malicious code in bioql PyPI...

EUVD-2025-25172

Malicious code in bioql PyPI...

EUVD-2025-13838

Malicious code in bioql PyPI...

EUVD-2025-2861

Malicious code in bioql PyPI...

EUVD-2025-27593

Malicious code in bioql PyPI...

EUVD-2025-24910

Malicious code in bioql PyPI...

EUVD-2025-3926

Malicious code in bioql PyPI...

EUVD-2025-30890

Malicious code in bioql PyPI...

EUVD-2022-49631

Malicious code in bioql PyPI...

EUVD-2025-7910

Malicious code in bioql PyPI...

EUVD-2025-27972

Malicious code in bioql PyPI...

EUVD-2025-18940

Malicious code in bioql PyPI...

EUVD-2024-38141

Malicious code in bioql PyPI...

EUVD-2023-12336

Malicious code in bioql PyPI...

PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

...

CVE-2025-59948 FreshRSS is vulnerable to XSS due to lack of CSP on HTML query page

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to ...

PT-2025-39918

Name of the Vulnerable Software and Affected Versions FreshRSS versions 1.26.3 and below Description FreshRSS does not properly sanitize event handler attributes within feed content. This can lead to cross-site scripting XSS if a page renders feed entries without a Content Security Policy CSP. Th...