4502 matches found
CVE-2025-59835
LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict the storage directory of files on the...
CVE-2025-61685 Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure
Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent path traversal for reading file...
EUVD-2025-25412
Malicious code in bioql PyPI...
EUVD-2025-28190
Malicious code in bioql PyPI...
EUVD-2025-28093
Malicious code in bioql PyPI...
EUVD-2025-28060
Malicious code in bioql PyPI...
EUVD-2025-28089
Malicious code in bioql PyPI...
EUVD-2025-10755
Malicious code in bioql PyPI...
EUVD-2023-29122
Malicious code in bioql PyPI...
EUVD-2023-23762
Malicious code in bioql PyPI...
EUVD-2023-35396
Malicious code in bioql PyPI...
EUVD-2023-35397
Malicious code in bioql PyPI...
EUVD-2023-46928
Malicious code in bioql PyPI...
EUVD-2024-49328
Malicious code in bioql PyPI...
EUVD-2025-31085
Malicious code in bioql PyPI...
EUVD-2021-9586
Malicious code in bioql PyPI...
EUVD-2021-3264
Malicious code in bioql PyPI...
EUVD-2022-25479
Malicious code in bioql PyPI...