EUVD-2024-0923

Malicious code in bioql PyPI...

EUVD-2025-8235

Malicious code in bioql PyPI...

EUVD-2024-3503

Malicious code in bioql PyPI...

EUVD-2025-8224

Malicious code in bioql PyPI...

EUVD-2024-1938

Malicious code in bioql PyPI...

EUVD-2022-27265

Malicious code in bioql PyPI...

EUVD-2022-27266

Malicious code in bioql PyPI...

EUVD-2024-2368

Malicious code in bioql PyPI...

EUVD-2023-1173

Malicious code in bioql PyPI...

EUVD-2024-42701

Malicious code in bioql PyPI...

EUVD-2023-0951

Malicious code in bioql PyPI...

EUVD-2024-2634

Malicious code in bioql PyPI...

EUVD-2024-2375

Malicious code in bioql PyPI...

EUVD-2024-0785

Malicious code in bioql PyPI...

EUVD-2025-25355

Malicious code in bioql PyPI...

EUVD-2025-21396

Malicious code in bioql PyPI...

EUVD-2025-21409

Malicious code in bioql PyPI...

Improper Access Control

Directus is vulnerable to an improper access control vulnerability. The vulnerability is due to a flaw in the file update mechanism, which allows an attacker to modify existing files or upload arbitrary files without authentication, bypassing metadata tracking and evading visibility in the Direct...

CVE-2025-55746

Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents without changes being applied to the files'...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @directus/api (>=15.0.0, <=28.0.2) +3 more potentially affected by CVE-2025-55746 via directus (>=10.8.3, <=11.9.2)

directus NPM version =10.8.3, =1.6.3, =15.0.0, =1.2.2, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-55746 Source advisory: OSV:GHSA-MV33-9F6J-PFMC...