EUVD-2023-26952

Malicious code in bioql PyPI...

EUVD-2023-44236

Malicious code in bioql PyPI...

EUVD-2023-32765

Malicious code in bioql PyPI...

EUVD-2025-25148

Malicious code in bioql PyPI...

EUVD-2021-29306

Malicious code in bioql PyPI...

EUVD-2023-0891

Malicious code in bioql PyPI...

EUVD-2023-44530

Malicious code in bioql PyPI...

EUVD-2025-25174

Malicious code in bioql PyPI...

EUVD-2023-44235

Malicious code in bioql PyPI...

EUVD-2021-28584

Malicious code in bioql PyPI...

EUVD-2025-14585

Malicious code in bioql PyPI...

EUVD-2024-34216

Malicious code in bioql PyPI...

EUVD-2025-4376

Malicious code in bioql PyPI...

GO-2025-3978 Mattermost boards plugin fails to restrict download access to files in github.com/mattermost/mattermost-plugin-boards

Mattermost boards plugin fails to restrict download access to files in github.com/mattermost/mattermost-plugin-boards...

Linux Distros Unpatched Vulnerability : CVE-2022-50370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: designware: Fix handling of real but unexpected device interrupts Commit c7b79a752871...

Mattermost boards plugin fails to restrict download access to files

Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration...

GHSA-F72G-52V7-MG3P Mattermost boards plugin fails to restrict download access to files

Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration...

Authorization Bypass Through User-Controlled Key

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the boards plugin download endpoint. An attacker can access and download files belonging to...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the boards plugin download endpoint. An attacker can access and download files belonging to other users by enumerating UUIDs. Remediation Upgrade...

DEBIAN-CVE-2022-50370

In the Linux kernel, the following vulnerability has been resolved: i2c: designware: Fix handling of real but unexpected device interrupts Commit c7b79a752871 "mfd: intel-lpss: Add Intel Alder Lake PCH-S PCI IDs" caused a regression on certain Gigabyte motherboards for Intel Alder Lake-S where...