EUVD-2025-28697

Malicious code in bioql PyPI...

EUVD-2023-38103

Malicious code in bioql PyPI...

EUVD-2025-18283

Malicious code in bioql PyPI...

EUVD-2022-15808

Malicious code in bioql PyPI...

EUVD-2022-7411

Malicious code in bioql PyPI...

EUVD-2025-9010

Malicious code in bioql PyPI...

EUVD-2025-12622

Malicious code in bioql PyPI...

EUVD-2023-12569

Malicious code in bioql PyPI...

EUVD-2023-45182

Malicious code in bioql PyPI...

EUVD-2022-2644

Malicious code in bioql PyPI...

EUVD-2023-31101

Malicious code in bioql PyPI...

EUVD-2023-42096

Malicious code in bioql PyPI...

EUVD-2022-44892

Malicious code in bioql PyPI...

EUVD-2022-35620

Malicious code in bioql PyPI...

EUVD-2022-3783

Malicious code in bioql PyPI...

EUVD-2012-0857

Malicious code in bioql PyPI...

EUVD-2025-29276

Malicious code in bioql PyPI...

CVE-2025-61677: Deserialization of Untrusted Data

DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...

DataChain 代码问题漏洞

DataChain is a version control software from Iterative open source. A code issue vulnerability exists in DataChain 0.34.1 and prior versions, which stems from failure to validate data when reading serialized objects from environment variables, which could lead to code execution...

CVE-2025-59952

MinIO Java SDK is a Simple Storage Service aka S3 client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically...