EUVD-2021-8250

Malicious code in bioql PyPI...

EUVD-2024-0267

Malicious code in bioql PyPI...

EUVD-2022-53105

Malicious code in bioql PyPI...

EUVD-2025-25093

Malicious code in bioql PyPI...

EUVD-2025-5255

Malicious code in bioql PyPI...

EUVD-2024-53231

Malicious code in bioql PyPI...

EUVD-2025-27123

Malicious code in bioql PyPI...

EUVD-2022-28261

Malicious code in bioql PyPI...

EUVD-2023-32460

Malicious code in bioql PyPI...

EUVD-2022-2678

Malicious code in bioql PyPI...

EUVD-2023-1228

Malicious code in bioql PyPI...

EUVD-2025-31559

Malicious code in bioql PyPI...

EUVD-2023-56312

Malicious code in bioql PyPI...

EUVD-2023-48752

Malicious code in bioql PyPI...

EUVD-2024-51518

Malicious code in bioql PyPI...

expat security update

An update is available for expat. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: libexpat: expa...

RLSA-2025:7512 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to th...

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

CVE-2023-45612 - https://nvd.nist.gov/vuln/detail/CVE-2023-456...

CVE-2025-20369

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...

CVE-2025-61604

WeGIA CSRF in delete operation (Almoxarifado) affects versions 3.4.12 and earlier of WeGIA, where the delete endpoint is exposed via HTTP GET without CSRF protection, allowing an attacker to trigger actions using a victim’s authenticated session. This vulnerability is fixed in version 3.5.0. Impa...