EUVD-2024-43810

Malicious code in bioql PyPI...

CVE-2024-49363

Misskey FileServerService (media proxy) in version 2024.10.1 and earlier is vulnerable: proxyHandler does not verify that incoming requests come from a proxy, enabling a self-propagating reflected/amplified DDoS via nested proxy requests ending in a redirect to another nested proxy. This can caus...

CVE-2024-49363: Asymmetric Resource Consumption (Amplification)

Misskey is an open source, federated social media platform. In affected versions FileServerService media proxy in github.com/misskey-dev/misskey 2024.10.1 or earlier did not detect proxy loops, which allows remote actors to execute a self-propagating reflected/amplified distributed...