EUVD-2025-31429

Malicious code in bioql PyPI...

EUVD-2023-52369

Malicious code in bioql PyPI...

EUVD-2022-36792

Malicious code in bioql PyPI...

EUVD-2022-42354

Malicious code in bioql PyPI...

EUVD-2024-49152

Malicious code in bioql PyPI...

EUVD-2023-43182

Malicious code in bioql PyPI...

EUVD-2024-19774

Malicious code in bioql PyPI...

EUVD-2023-44792

Malicious code in bioql PyPI...

EUVD-2023-47495

Malicious code in bioql PyPI...

EUVD-2022-15247

Malicious code in bioql PyPI...

EUVD-2023-43183

Malicious code in bioql PyPI...

EUVD-2024-42486

Malicious code in bioql PyPI...

EUVD-2024-47561

Malicious code in bioql PyPI...

EUVD-2024-44309

Malicious code in bioql PyPI...

EUVD-2024-1506

Malicious code in bioql PyPI...

Arbitrary File Creation

github.com/charmbracelet/soft-serve is vulnerable to Arbitrary file creation. The vulnerability is due to uncontrolled data being written through its SSH API, which allows an attacker to create or override arbitrary files...

CLSA-2025-1759167915 git: Fix of CVE-2025-46835

CVE-2025-46835: prevent malicious creating and overwriting of user's files...

SUSE CVE-2025-59352

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...

`git-comiters` Command Injection vulnerability

Background on the vulnerability This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not saniti...

CVE-2025-59352

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...