EUVD-2022-5665

Malicious code in bioql PyPI...

EUVD-2024-38580

Malicious code in bioql PyPI...

EUVD-2025-27406

Malicious code in bioql PyPI...

EUVD-2025-29653

Malicious code in bioql PyPI...

EUVD-2023-53842

Malicious code in bioql PyPI...

EUVD-2023-44857

Malicious code in bioql PyPI...

EUVD-2023-40746

Malicious code in bioql PyPI...

EUVD-2025-7222

Malicious code in bioql PyPI...

EUVD-2022-48082

Malicious code in bioql PyPI...

EUVD-2025-19010

Malicious code in bioql PyPI...

EUVD-2024-2856

Malicious code in bioql PyPI...

EUVD-2025-26080

Malicious code in bioql PyPI...

EUVD-2021-9222

Malicious code in bioql PyPI...

EUVD-2025-14714

Malicious code in bioql PyPI...

EUVD-2022-48076

Malicious code in bioql PyPI...

EUVD-2024-1994

Malicious code in bioql PyPI...

EUVD-2023-39182

Malicious code in bioql PyPI...

Insufficient Session Expiration

weblate is vulnerable to Insufficient Session Expiration. The vulnerability is due to unsafe settings for the second factor in 2FA due to sessions being allowed to persist for an unusually long period, and an attacker can maintain a valid session to repeatedly attempt authentication, thereby...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...