4078 matches found
Lovable VDP: Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable AI)
The API endpoint /workspaces//tool-preferences/aigateway/enable did not enforce proper authorization checks. As a result, an account with the Editor role was able to disable the workspace-wide admin-only Lovable AI feature, which powers key AI functionalities across the workspace...
Lovable VDP: Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable Cloud)
A vulnerability was discovered where an account with the Editor role could call an API endpoint that disabled workspace-wide admin-only features. This was due to a lack of server-side role checks, allowing a vertical privilege escalation...
EUVD-2022-54953
Malicious code in bioql PyPI...
EUVD-2025-30856
Malicious code in bioql PyPI...
EUVD-2024-54004
Malicious code in bioql PyPI...
EUVD-2023-0455
Malicious code in bioql PyPI...
EUVD-2024-18536
Malicious code in bioql PyPI...
EUVD-2025-27872
Malicious code in bioql PyPI...
EUVD-2023-32831
Malicious code in bioql PyPI...
EUVD-2024-52311
Malicious code in bioql PyPI...
EUVD-2024-36560
Malicious code in bioql PyPI...
EUVD-2024-25986
Malicious code in bioql PyPI...
EUVD-2025-8996
Malicious code in bioql PyPI...
EUVD-2023-45839
Malicious code in bioql PyPI...
EUVD-2024-3195
Malicious code in bioql PyPI...
EUVD-2023-59709
Malicious code in bioql PyPI...
EUVD-2024-46344
Malicious code in bioql PyPI...
EUVD-2023-37274
Malicious code in bioql PyPI...