EUVD-2023-2978

Malicious code in bioql PyPI...

EUVD-2022-31223

Malicious code in bioql PyPI...

EUVD-2022-6982

Malicious code in bioql PyPI...

EUVD-2025-29113

Malicious code in bioql PyPI...

EUVD-2025-20237

Malicious code in bioql PyPI...

EUVD-2022-37177

Malicious code in bioql PyPI...

EUVD-2022-32611

Malicious code in bioql PyPI...

EUVD-2023-2523

Malicious code in bioql PyPI...

EUVD-2022-37262

Malicious code in bioql PyPI...

EUVD-2025-27982

Malicious code in bioql PyPI...

EUVD-2023-3051

Malicious code in bioql PyPI...

EUVD-2024-2948

Malicious code in bioql PyPI...

EUVD-2022-39475

Malicious code in bioql PyPI...

EUVD-2021-27515

Malicious code in bioql PyPI...

java-21-openjdk security update

An update is available for java-21-openjdk. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime...

cups: Authentication Bypass in CUPS Authorization Handling

A flaw was found in CUPS, a widely used printing service on Linux and UNIX-like systems. The issue arises when authentication is configured to use a method other than Basic, but the attacker sends an HTTP request with a Basic authentication header. Due to improper validation in the cupsdAuthorize...

CVE-2025-59163

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

CLSA-2025-1758289909 Fix CVE(s): CVE-2025-1735, CVE-2025-1736

SECURITY UPDATE: Inadequate validation in pgsql and pdopgsql functions - debian/patches/CVE-2025-1735.patch: add error checks for escape function in pgsql and pdopgsql extensions to prevent potential security issues - CVE-2025-1735 SECURITY UPDATE: Insufficient HTTP header validation -...

CVE-2023-49564

CVE-2023-49564 : The CBIS/NCS Manager API is vulnerable to an authentication bypass. A specially crafted HTTP header from an unauthenticated user can access restricted API functions. Root cause is a weak verification mechanism in the authentication implementation within the Nginx Podman container...

MGASA-2025-0233 Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities

Better Glyph drawing. CVE-2025-30749 Enhance TLS protocol support. CVE-2025-30754 Improve scripting supports. CVE-2025-30761 Improve HTTP client header handling. CVE-2025-50059 Better Glyph drawing redux. CVE-2025-50106...