EUVD-2023-27492

Malicious code in bioql PyPI...

EUVD-2024-41605

Malicious code in bioql PyPI...

EUVD-2024-48238

Malicious code in bioql PyPI...

EUVD-2024-49460

Malicious code in bioql PyPI...

EUVD-2024-0747

Malicious code in bioql PyPI...

EUVD-2025-9615

Malicious code in bioql PyPI...

EUVD-2022-40724

Malicious code in bioql PyPI...

EUVD-2023-49527

Malicious code in bioql PyPI...

EUVD-2023-49615

Malicious code in bioql PyPI...

EUVD-2024-28060

Malicious code in bioql PyPI...

EUVD-2021-32453

Malicious code in bioql PyPI...

EUVD-2023-0005

Malicious code in bioql PyPI...

EUVD-2021-31874

Malicious code in bioql PyPI...

EUVD-2025-22472

Malicious code in bioql PyPI...

EUVD-2022-28129

Malicious code in bioql PyPI...

EUVD-2023-2225

Malicious code in bioql PyPI...

golang-github-openprinting-ipp-usb security update

An update is available for golang-github-openprinting-ipp-usb. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list HTTP reverse proxy, backed by IPP-over-USB...

Request Smuggling

h2 is vulnerable to request smuggling. The vulnerability is due to improper validation of header names/values when downgrading HTTP/2 requests to HTTP/1.1, which allows an attacker to inject CRLF characters, manipulate request boundaries, and bypass security controls...

GHSA-MCVP-RPGG-9273 DragonFly's tiny file download uses hard coded HTTP protocol

Impact The code in the scheduler for downloading a tiny file is hard coded to use the HTTP protocol, rather than HTTPS. This means that an attacker could perform a Man-in-the-Middle attack, changing the network request so that a different piece of data gets downloaded. Due to the use of weak...

DragonFly's tiny file download uses hard coded HTTP protocol

The code in the scheduler for downloading a tiny file is hard coded to use the HTTP protocol, rather than HTTPS. This means that an attacker could perform a Man-in-the-Middle attack, changing the network request so that a different piece of data gets downloaded. Due to the use of weak integrity...