Improper Validation of Syntactic Correctness of Input

Overview uv is an An extremely fast Python package and project manager, written in Rust. Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in ZIP archives filenames processing. An attacker can cause malicious code to be executed or files to ...

EUVD-2004-2179

Malware in sbrugna...

EUVD-2007-1094

Malware in sbrugna...

EUVD-2021-27338

Malware in sbrugna...

EUVD-2021-10954

Malware in sbrugna...

EUVD-2017-16311

Malware in sbrugna...

EUVD-2014-1924

Malware in sbrugna...

EUVD-2014-4740

Malware in sbrugna...

EUVD-2010-2263

Malware in sbrugna...

EUVD-2018-0291

Malware in sbrugna...

EUVD-2025-27416

Malicious code in bioql PyPI...

EUVD-2023-58210

Malicious code in bioql PyPI...

EUVD-2022-34394

Malicious code in bioql PyPI...

EUVD-2022-35122

Malicious code in bioql PyPI...

EUVD-2024-2373

Malicious code in bioql PyPI...

EUVD-2025-27288

Malicious code in bioql PyPI...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

CVE-2025-1862

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By...