EUVD-2023-12906

Malicious code in bioql PyPI...

EUVD-2021-33137

Malicious code in bioql PyPI...

EUVD-2025-24029

Malicious code in bioql PyPI...

EUVD-2024-0440

Malicious code in bioql PyPI...

EUVD-2025-25731

Malicious code in bioql PyPI...

EUVD-2024-3106

Malicious code in bioql PyPI...

CVE-2025-59937

Go-mail (github.com/wneessen/go-mail) vulnerable in versions

CVE-2025-59937 go-mail has insufficient address encoding when passing mail addresses to the SMTP client

go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender- or recipient address is passed to the corresponding MAIL FROM or RCPT TO commands of the SMTP client, there is a possibility of wrong...

Malicious code in service-catalog-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0ae0aeaeb46ba7f8b11f6d147563511507aba9c9464d22afe7caae70697ec8d The OpenSSF Package Analysis project identified 'service-catalog-client' @ 0.7.0 rubygems as malicious. It is considered malicious because: - Th...

MAL-2025-46943 Malicious code in service-catalog-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0ae0aeaeb46ba7f8b11f6d147563511507aba9c9464d22afe7caae70697ec8d The OpenSSF Package Analysis project identified 'service-catalog-client' @ 0.7.0 rubygems as malicious. It is considered malicious because: - Th...

Linux Distros Unpatched Vulnerability : CVE-2023-37365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hnswlib 0.7.0 has a double free in initindex when the M argument is a large integer. CVE-2023-37365 Note that Nessus relies on the presence of the package as...

CVE-2025-7642

The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwcwoocommerceordercreated function. This makes it possible for...

CVE-2025-7642

The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwcwoocommerceordercreated function. This makes it possible for...

CVE-2025-7642 Simpler Checkout 0.7.0 - 1.1.9 - Authentication Bypass

The Simpler Checkout plugin for WordPress is vulnerable to Authentication Bypass in versions 0.7.0 to 1.1.9. This is due to the plugin not properly verifying a user's identity prior to logging them in as an admin through the simplerwcwoocommerceordercreated function. This makes it possible for...

PT-2025-34507 · WordPress · Simpler Checkout

Name of the Vulnerable Software and Affected Versions: Simpler Checkout versions 0.7.0 through 1.1.9 Description: The Simpler Checkout plugin for WordPress is susceptible to authentication bypass. The plugin does not properly verify a user’s identity before granting access as an administrator...

CVE-2025-55008

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...

CVE-2025-55008

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...

CVE-2025-55008 AuthKit React Router: Sensitive auth data rendered in HTML

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...

CVE-2025-55008

CVE-2025-55008 affects the AuthKit React Router library for React Router 7+. In versions ≤ 0.6.1, the package exposes sensitive authentication artifacts — specifically sealedSession and accessToken — by returning them from the authkitLoader , causing them to be rendered into browser HTML (informa...

CVE-2025-55008 AuthKit React Router: Sensitive auth data rendered in HTML

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...