EUVD-2025-176302

Malicious code in socket-table-grid-sigma-deserialize npm...

EUVD-2025-179378

Malicious code in decompress-deserialize-nu-new-emulate npm...

EUVD-2025-178905

Malicious code in final-bundle-zero-string-deserialize npm...

EUVD-2025-176175

Malicious code in string-route-theta-virtualize-deserialize npm...

EUVD-2025-179141

Malicious code in encode-route-deserialize-eta-export npm...

EUVD-2025-178443

Malicious code in import-scale-deserialize-sudo-visualize npm...

EUVD-2025-179211

Malicious code in easy-kernel-deserialize-public-await npm...

pkcs11-helper -- deserialize buffer overflow

Alon Bar-Lev reports: util: fix deserialize buffer overflow. thanks to Aarnav Bos...

EUVD-2022-0619

Malicious code in bioql PyPI...

EUVD-2025-31172

Malicious code in bioql PyPI...

Incorrect Authorization

Overview authlib is a library in building OAuth and OpenID Connect servers. Affected versions of this package are vulnerable to Incorrect Authorization via the deserializecompact function. An attacker can bypass intended authorization policies by crafting a signed token with unknown critical head...

PT-2025-38752

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.6.4 Description Authlib’s JWS verification improperly handles tokens declaring unknown critical header parameters crit, violating RFC 7515 specifications. An attacker can create a signed token with a critical header...

EUVD-2025-30225

A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection...

Malicious code in benchmark-deserialize-mu-epsilon-shell (npm)

The package benchmark-deserialize-mu-epsilon-shell was found to contain malicious code...

Malicious code in deserialize-object-bash-monitor-short (npm)

The package deserialize-object-bash-monitor-short was found to contain malicious code...

Malicious code in deserialize-promise-tree-gamma-monitor (npm)

The package deserialize-promise-tree-gamma-monitor was found to contain malicious code...

Malicious code in reject-sun-deserialize-runtime-emulate (npm)

The package reject-sun-deserialize-runtime-emulate was found to contain malicious code...

Malicious code in async-deserialize-xi-assert-shell (npm)

The package async-deserialize-xi-assert-shell was found to contain malicious code...

Malicious code in deserialize-slow-warn-quick-export (npm)

The package deserialize-slow-warn-quick-export was found to contain malicious code...

MAL-2025-34158 Malicious code in sudo-resolve-deserialize-file-cloud (npm)

The package sudo-resolve-deserialize-file-cloud was found to contain malicious code...