EUVD-2022-0110

Malicious code in bioql PyPI...

EUVD-2022-53033

Malicious code in bioql PyPI...

EUVD-2022-53035

Malicious code in bioql PyPI...

EUVD-2024-0631

Malicious code in bioql PyPI...

EUVD-2022-1268

Malicious code in bioql PyPI...

EUVD-2022-53023

Malicious code in bioql PyPI...

EUVD-2022-52986

Malicious code in bioql PyPI...

EUVD-2022-53027

Malicious code in bioql PyPI...

EUVD-2024-34463

Malicious code in bioql PyPI...

EUVD-2025-20241

Malicious code in bioql PyPI...

EUVD-2022-52972

Malicious code in bioql PyPI...

EUVD-2022-53010

Malicious code in bioql PyPI...

EUVD-2022-53029

Malicious code in bioql PyPI...

EUVD-2022-53042

Malicious code in bioql PyPI...

pyLoad < 0.5.0b3.dev76 Improper Access Control

pyLoad version prior to 0.5.0b3.dev76 is affected by an Improper Access Control vulnerability. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. An attacker can leverage this vulnerability to perform further attacks against the...

Security Bulletin: Vulnerability in certifi, flask, idna, urllib3 and axios might affect IBM Storage Defender Sentinel Anomaly Scan Engine.

Summary IBM Storage Defender Sentinel Anomaly Scan Engine can be affected by vulnerabilities in certifi, flask, idna, urllib3 and axios. Vulnerabilities include allowing an attacker to cause a denial of service, obtain sensitive information and gain access to launch further attacks on the systems...

CVE-2025-58065

Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface...

ROS-20250912-09

Vulnerability in the implementation of the CORS mechanism of the Python PyPi language software product repository is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information. remotely to disclose protected...

abi-ds-utils (=1.0.1), acceldata-o2a (=1.0.0) +133 more potentially affected by CVE-2025-58065 via flask-appbuilder (>=4.1.2 <=4.6.3)

flask-appbuilder PYPI version =4.1.2, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.2.1, =0.4.0, =0.1.0a1, =0.8.2, =0.1.1, =0.1.1, =1.10.6 - airflow-cyberark-secrets-backend =0.1.0 and more Source cves: CVE-2025-58065 Source advisory: SNYK:PYTHON-FLASKAPPBUILDER-12670878...

Improper Authentication

Overview Flask-AppBuilder is a simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Affected versions of this package are vulnerable to Improper Authentication via the reset my...