EUVD-2025-14754

Malicious code in bioql PyPI...

EUVD-2024-35276

Malicious code in bioql PyPI...

EUVD-2022-38832

Malicious code in bioql PyPI...

EUVD-2023-35724

Malicious code in bioql PyPI...

EUVD-2025-23481

Malicious code in bioql PyPI...

EUVD-2024-41740

Malicious code in bioql PyPI...

EUVD-2022-7642

Malicious code in bioql PyPI...

EUVD-2025-28921

Malicious code in bioql PyPI...

EUVD-2024-0622

Malicious code in bioql PyPI...

EUVD-2025-26117

Malicious code in bioql PyPI...

EUVD-2025-26385

Malicious code in bioql PyPI...

EUVD-2025-12111

Malicious code in bioql PyPI...

EUVD-2023-49588

Malicious code in bioql PyPI...

EUVD-2023-0253

Malicious code in bioql PyPI...

EUVD-2024-1419

Malicious code in bioql PyPI...

EUVD-2022-5884

Malicious code in bioql PyPI...

EUVD-2022-6168

Malicious code in bioql PyPI...

Improper Authentication

esphome is vulnerable to improper authentication. The vulnerability is due to the webserver authentication check incorrectly passing when the client-supplied base64-encoded Authorization value is empty or a substring of the correct value, which allows an attacker to gain unauthorized access to...

Security Bulletin: urllib3 Proxy-Authorization header only applies with ProxyManager, not direct requests

Summary urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with ProxyManager, the Proxy-Authorization header is only sent to the configured proxy, as expected. However, when sending HTTP requests without using urllib3's proxy support, it's possible to...

OESA-2025-2339 python-pip security update

pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 5 Summary: A...