EUVD-2024-2682

Malicious code in bioql PyPI...

EUVD-2024-30361

Malicious code in bioql PyPI...

EUVD-2022-4823

Malicious code in bioql PyPI...

EUVD-2023-55581

Malicious code in bioql PyPI...

EUVD-2023-56252

Malicious code in bioql PyPI...

EUVD-2025-9783

Malicious code in bioql PyPI...

EUVD-2023-37441

Malicious code in bioql PyPI...

EUVD-2023-43774

Malicious code in bioql PyPI...

EUVD-2023-51641

Malicious code in bioql PyPI...

EUVD-2023-12446

Malicious code in bioql PyPI...

EUVD-2022-50365

Malicious code in bioql PyPI...

EUVD-2024-22252

Malicious code in bioql PyPI...

EUVD-2023-36965

Malicious code in bioql PyPI...

EUVD-2023-44803

Malicious code in bioql PyPI...

GHSA-XCH9-H8QW-85C7 Canonical LXD Project Existence Determination Through Error Handling in Image Get Function

Impact The LXD /1.0/images endpoint is implemented as an AllowUntrusted API that requires no authentication, making it accessible to users without accounts. This API allows determining project existence through differences in HTTP status codes when accessed with the project parameter...

PT-2025-39440

Name of the Vulnerable Software and Affected Versions petstore version 1.0.7 Description An issue allows a remote attacker to execute arbitrary code by accessing a non-existent endpoint /cart. The server responds with a 404-error page that reveals sensitive information, including the Servlet name...

CVE-2025-58765

wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting XSS vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter requestURL derived from the original request target is directly...

Webrecorder packages are vulnerable to XSS through 404 error handling logic

A Reflected Cross-Site Scripting XSS vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter requestURL derived from the original request target is directly embedded into an inline block without sanitization or escaping. This allows an attacker to craft ...

CVE-2025-58765

wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting XSS vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter requestURL derived from the original request target is directly...

CVE-2025-58765 wabac.js has XSS vulnerability in 404 error handling logic

wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting XSS vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter requestURL derived from the original request target is directly...