EUVD-2023-55083

Malicious code in bioql PyPI...

EUVD-2022-3773

Malicious code in bioql PyPI...

EUVD-2023-1319

Malicious code in bioql PyPI...

EUVD-2025-4890

Malicious code in bioql PyPI...

EUVD-2023-38484

Malicious code in bioql PyPI...

EUVD-2025-10290

Malicious code in bioql PyPI...

EUVD-2022-2376

Malicious code in bioql PyPI...

EUVD-2021-6696

Malicious code in bioql PyPI...

EUVD-2022-1918

Malicious code in bioql PyPI...

EUVD-2023-23476

Malicious code in bioql PyPI...

EUVD-2023-12294

Malicious code in bioql PyPI...

EUVD-2025-4891

Malicious code in bioql PyPI...

EUVD-2022-4034

Malicious code in bioql PyPI...

EUVD-2024-17636

Malicious code in bioql PyPI...

CVE-2025-48924 affecting package apache-commons-lang3 for versions less than 3.8.1-6

CVE-2025-48924 affecting package apache-commons-lang3 for versions less than 3.8.1-6. A patched version of the package is available...

CVE-2025-61668 @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a...

Apple Security Update: watchOS 26.0.2

Apple recommends to install security update watchOS 26.0.2 on devices Apple Watch Series 6 and later...

AZL-67928 CVE-2025-11082 affecting package gdb for versions less than 13.2-6

A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be use...

CVE-2024-11738 affecting package rust for versions less than 1.86.0-6

CVE-2024-11738 affecting package rust for versions less than 1.86.0-6. A patched version of the package is available...

CVE-2025-59040 Tuleap backlog item representations do not verify the permissions of the child trackers

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition...