EUVD-2025-6761

Malicious code in bioql PyPI...

EUVD-2024-54850

Malicious code in bioql PyPI...

EUVD-2025-28393

Malicious code in bioql PyPI...

EUVD-2025-28776

Malicious code in bioql PyPI...

EUVD-2021-7981

Malicious code in bioql PyPI...

EUVD-2022-3513

Malicious code in bioql PyPI...

EUVD-2022-40915

Malicious code in bioql PyPI...

EUVD-2022-4535

Malicious code in bioql PyPI...

EUVD-2025-8642

Malicious code in bioql PyPI...

CVE-2025-10096

A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...

CVE-2025-10096: Server-Side Request Forgery (SSRF)

A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...

Sim Studio code-related vulnerabilities

Sim Studio is an AI agent workflow builder for Sim Studio open source. A code issue vulnerability exists in Sim Studio 1.0.0 and prior versions, which stems from an incorrect manipulation of the parameter filePath that could lead to server-side request forgery...

Path traversal via Clean on Windows in path/filepath

...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the filepathTemplate parameter in the CreateResource endpoint, when objects are stored locally. An authenticated attacker can write arbitrary files to the server filesystem by submitting a crafted filename...

CVE-2025-9801

A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affects an unknown part. The manipulation of the argument filePath leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and...

CVE-2025-9801: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affects an unknown part. The manipulation of the argument filePath leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and...

CVE-2024-8244

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of use race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress...

CVE-2024-8244

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of use race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress...

DEBIAN-CVE-2024-8244

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of use race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress...

CVE-2024-8244

The filepath.Walk and filepath.WalkDir functions are susceptible to a TOCTOU (time of check/time of use) race condition. Although these functions are documented as not following symbolic links, an attacker can replace a portion of the path being walked with a symbolic link while the walk is in pr...