EUVD-2023-38526

Malicious code in bioql PyPI...

EUVD-2024-2809

Malicious code in bioql PyPI...

EUVD-2022-37744

Malicious code in bioql PyPI...

EUVD-2022-41826

Malicious code in bioql PyPI...

EUVD-2022-41825

Malicious code in bioql PyPI...

EUVD-2025-16789

Malicious code in bioql PyPI...

EUVD-2023-32125

Malicious code in bioql PyPI...

EUVD-2023-41177

Malicious code in bioql PyPI...

EUVD-2024-45834

Malicious code in bioql PyPI...

EUVD-2025-19180

Malicious code in bioql PyPI...

EUVD-2025-19715

Malicious code in bioql PyPI...

EUVD-2024-18813

Malicious code in bioql PyPI...

EUVD-2023-39172

Malicious code in bioql PyPI...

EUVD-2022-41824

Malicious code in bioql PyPI...

EUVD-2022-41828

Malicious code in bioql PyPI...

EUVD-2025-23495

Malicious code in bioql PyPI...

Datart 安全漏洞

Datart is running-elephant's open source generation open platform for data visualization. A security vulnerability exists in Datart 1.0.0-rc3 and earlier versions, which stems from the use of hard-coded keys in the datart/security/src/main/java/datart/security/util/AESUtil.java file...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase version before 2.10.12 has a security vulnerability , the vulnerabilit...

GHSA-3C93-92R7-J934 Grafana Infinity Datasource Plugin SSRF Vulnerability

Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...

CVE-2025-8341 SSRF in Infinity Datasource Plugin

Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...