5135 matches found
CVE-2025-61677 DataChain: Deserialization of Untrusted Data from Environment Variables
DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...
CVE-2025-61677
DataChain is a Python-based AI-data warehouse. Versions 0.34.1 and earlier are vulnerable to deserialization of untrusted data caused by how the loader.py reads serialized objects from environment variables (e.g., DATACHAIN__METASTORE, DATACHAIN__WAREHOUSE). An attacker who can set these environm...
EUVD-2022-1325
Malicious code in bioql PyPI...
EUVD-2021-8642
Malicious code in bioql PyPI...
EUVD-2022-2706
Malicious code in bioql PyPI...
EUVD-2022-5804
Malicious code in bioql PyPI...
EUVD-2024-1491
Malicious code in bioql PyPI...
EUVD-2022-31257
Malicious code in bioql PyPI...
EUVD-2023-1551
Malicious code in bioql PyPI...
EUVD-2023-1019
Malicious code in bioql PyPI...
EUVD-2025-0025
Malicious code in bioql PyPI...
EUVD-2024-2124
Malicious code in bioql PyPI...
EUVD-2021-31022
Malicious code in bioql PyPI...
EUVD-2024-46103
Malicious code in bioql PyPI...
EUVD-2024-52630
Malicious code in bioql PyPI...
EUVD-2025-30835
Malicious code in bioql PyPI...
EUVD-2023-0758
Malicious code in bioql PyPI...
EUVD-2025-23117
Malicious code in bioql PyPI...