EUVD-2025-23603

Malicious code in bioql PyPI...

EUVD-2024-46401

Malicious code in bioql PyPI...

EUVD-2022-5232

Malicious code in bioql PyPI...

EUVD-2024-51654

Malicious code in bioql PyPI...

EUVD-2024-32741

Malicious code in bioql PyPI...

EUVD-2024-43368

Malicious code in bioql PyPI...

EUVD-2023-34238

Malicious code in bioql PyPI...

EUVD-2024-42679

Malicious code in bioql PyPI...

EUVD-2023-56095

Malicious code in bioql PyPI...

EUVD-2025-31394

Malicious code in bioql PyPI...

EUVD-2024-47011

Malicious code in bioql PyPI...

EUVD-2023-1543

Malicious code in bioql PyPI...

EUVD-2024-32742

Malicious code in bioql PyPI...

EUVD-2025-23169

Malicious code in bioql PyPI...

EUVD-2024-51652

Malicious code in bioql PyPI...

EUVD-2025-15586

Malicious code in bioql PyPI...

EUVD-2021-32520

Malicious code in bioql PyPI...

CVE-2025-55795

The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with ...

CVE-2025-59934 Formbricks missing JWT signature verification

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...

CVE-2025-59934 Formbricks missing JWT signature verification

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...