EUVD-2024-0624

Malicious code in bioql PyPI...

EUVD-2024-2872

Malicious code in bioql PyPI...

EUVD-2023-1946

Malicious code in bioql PyPI...

EUVD-2023-2089

Malicious code in bioql PyPI...

EUVD-2024-3271

Malicious code in bioql PyPI...

EUVD-2024-0603

Malicious code in bioql PyPI...

EUVD-2023-1963

Malicious code in bioql PyPI...

EUVD-2024-2253

Malicious code in bioql PyPI...

EUVD-2024-2404

Malicious code in bioql PyPI...

EUVD-2023-2663

Malicious code in bioql PyPI...

EUVD-2024-2881

Malicious code in bioql PyPI...

EUVD-2024-2286

Malicious code in bioql PyPI...

EUVD-2024-3017

Malicious code in bioql PyPI...

CVE-2024-32034

decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organizations. The admin panel is subject to potential Cross-site scripting XSS attach in case an admin assigns a valuator to a proposal, or does any other action that generates an admi...

CVE-2024-27095

Decidim is a participatory democracy framework. The admin panel is subject to potential XSS attach in case the attacker manages to modify some records being uploaded to the server. This vulnerability is fixed in 0.27.6 and 0.28.1...

CVE-2023-34089

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The processes filter feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code ...

CVE-2023-34090

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...

CVE-2023-36465

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The templates module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in t...

CVE-2023-32693

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The external link feature is susceptible to cross-site scripting. This allows a remote attacker to execute JavaScript code in...

CVE-2023-51447

Decidim is a participatory democracy framework. Starting in version 0.27.0 and prior to versions 0.27.5 and 0.28.0, the dynamic file upload feature is subject to potential cross-site scripting attacks in case the attacker manages to modify the file names of the records being uploaded to the serve...