EUVD-2023-27001

Malicious code in bioql PyPI...

EUVD-2023-2057

Malicious code in bioql PyPI...

EUVD-2024-16245

Malicious code in bioql PyPI...

EUVD-2021-7882

Malicious code in bioql PyPI...

EUVD-2023-44415

Malicious code in bioql PyPI...

EUVD-2023-2981

Malicious code in bioql PyPI...

EUVD-2025-21056

Malicious code in bioql PyPI...

EUVD-2022-28867

Malicious code in bioql PyPI...

EUVD-2022-37385

Malicious code in bioql PyPI...

EUVD-2025-10959

Malicious code in bioql PyPI...

EUVD-2025-6985

Malicious code in bioql PyPI...

EUVD-2025-7020

Malicious code in bioql PyPI...

EUVD-2025-7112

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-22898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - workers/extractor.py in Pandora aka pandora-analysis/pandora 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive aka ZIP bomb...

defusedxml

This is a Python library called defusedxml, which is designed to prevent XML bomb denial of service DoS vulnerabilities. The library provides a facade for the standard library's xml.etree.ElementTree module, which is vulnerable to XML bombs. The defusedxml library defuses XML bombs by preventing...

defusedxml

This is a Python library called defusedxml, which is designed to prevent XML bomb denial of service DoS vulnerabilities. The library provides a facade for the xml.etree.ElementTree module, which is a built-in Python module for parsing and creating XML documents. The library is maintained by...

CVE-2025-58057

CVE-2025-58057 is a Netty vulnerability where, in affected releases of netty-codec-compression (≤ 4.1.124.Final) and netty-codec (≤ 4.2.4.Final), specially crafted input can cause BrotliDecoder and related decoders to allocate a large number of reachable byte buffers, leading to denial of service...

CVE-2025-58057 Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below, when supplied with specially crafted...

Netty's decoders vulnerable to DoS via zip bomb style attack

Summary With specially crafted input, BrotliDecoder and some other decompressing decoders will allocate a large number of reachable byte buffers, which can lead to denial of service. Details BrotliDecoder.decompress has no limit in how often it calls pull, decompressing data 64K bytes at a time...

GHSA-3P8M-J85Q-PGMJ Netty's decoders vulnerable to DoS via zip bomb style attack

Summary With specially crafted input, BrotliDecoder and some other decompressing decoders will allocate a large number of reachable byte buffers, which can lead to denial of service. Details BrotliDecoder.decompress has no limit in how often it calls pull, decompressing data 64K bytes at a time...