RLSA-2025:7256 Moderate: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang: crypto/tls: panic when processing post-handshake message on QUIC connections...

RLSA-2025:11335 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-3165...

EUVD-2022-25900

Malicious code in bioql PyPI...

EUVD-2025-32091

Malicious code in bioql PyPI...

EUVD-2025-25055

Malicious code in bioql PyPI...

EUVD-2025-24144

Malicious code in bioql PyPI...

EUVD-2025-24886

Malicious code in bioql PyPI...

EUVD-2025-28583

Malicious code in bioql PyPI...

EUVD-2025-27198

Malicious code in bioql PyPI...

EUVD-2025-24000

Malicious code in bioql PyPI...

EUVD-2023-49876

Malicious code in bioql PyPI...

EUVD-2025-24560

Malicious code in bioql PyPI...

EUVD-2025-24844

Malicious code in bioql PyPI...

EUVD-2025-27460

Malicious code in bioql PyPI...

EUVD-2025-25272

Malicious code in bioql PyPI...

EUVD-2025-25287

Malicious code in bioql PyPI...

EUVD-2025-25397

Malicious code in bioql PyPI...

EUVD-2025-24575

Malicious code in bioql PyPI...

EUVD-2025-27108

Malicious code in bioql PyPI...

CVE-2025-61604 WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery CSRF vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger...