EUVD-2024-46747

Malicious code in bioql PyPI...

EUVD-2025-9368

Malicious code in bioql PyPI...

EUVD-2023-59054

Malicious code in bioql PyPI...

EUVD-2025-1858

Malicious code in bioql PyPI...

EUVD-2023-54696

Malicious code in bioql PyPI...

EUVD-2024-50411

Malicious code in bioql PyPI...

EUVD-2022-4310

Malicious code in bioql PyPI...

EUVD-2025-6674

Malicious code in bioql PyPI...

EUVD-2025-6669

Malicious code in bioql PyPI...

EUVD-2024-48618

Malicious code in bioql PyPI...

EUVD-2023-58819

Malicious code in bioql PyPI...

EUVD-2024-32094

Malicious code in bioql PyPI...

EUVD-2024-42272

Malicious code in bioql PyPI...

EUVD-2025-6853

Malicious code in bioql PyPI...

EUVD-2025-6667

Malicious code in bioql PyPI...

EUVD-2022-6861

Malicious code in bioql PyPI...

CVE-2025-56381

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the orderby and groupby parameters...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the /api/user/updateuser endpoint. An attacker can gain unauthorized access by exploiting this endpoint to bypass authentication mechanisms. Remediation Upgrade...

CVE-2025-56381

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the orderby and groupby parameters...

PT-2025-40039

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...