RHEL 8 : Red Hat OpenStack Platform 16.2 (python-django20) (RHSA-2025:17499)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:17499 advisory. Security Fixes: Django SQL injection in FilteredRelation column aliases CVE-2025-57833 For more details about the security issues, including the...

RHEL 9 : Red Hat OpenStack Services on OpenShift 18.0 (python-django) (RHSA-2025:17500)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:17500 advisory. Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as...

EUVD-2025-16951

Malicious code in bioql PyPI...

EUVD-2022-0085

Malicious code in bioql PyPI...

EUVD-2025-13952

Malicious code in bioql PyPI...

EUVD-2024-0037

Malicious code in bioql PyPI...

EUVD-2022-0087

Malicious code in bioql PyPI...

EUVD-2024-0044

Malicious code in bioql PyPI...

EUVD-2025-0001

Malicious code in bioql PyPI...

EUVD-2023-0067

Malicious code in bioql PyPI...

EUVD-2022-0089

Malicious code in bioql PyPI...

EUVD-2023-0071

Malicious code in bioql PyPI...

EUVD-2022-0092

Malicious code in bioql PyPI...

EUVD-2024-0048

Malicious code in bioql PyPI...

EUVD-2024-3135

Malicious code in bioql PyPI...

EUVD-2025-6773

Malicious code in bioql PyPI...

EUVD-2025-32048

Malicious code in bioql PyPI...

EUVD-2022-0088

Malicious code in bioql PyPI...

EUVD-2024-0049

Malicious code in bioql PyPI...

GHSA-Q95W-C7QG-HRFF Django vulnerable to partial directory traversal via archives

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an archive with file paths sharing a common...