EUVD-2024-25123

Malicious code in bioql PyPI...

EUVD-2024-17656

Malicious code in bioql PyPI...

EUVD-2024-29782

Malicious code in bioql PyPI...

EUVD-2022-51486

Malicious code in bioql PyPI...

EUVD-2023-26837

Malicious code in bioql PyPI...

EUVD-2024-40049

Malicious code in bioql PyPI...

EUVD-2025-23570

Malicious code in bioql PyPI...

EUVD-2023-59023

Malicious code in bioql PyPI...

EUVD-2022-41039

Malicious code in bioql PyPI...

EUVD-2023-33638

Malicious code in bioql PyPI...

EUVD-2024-25124

Malicious code in bioql PyPI...

EUVD-2024-33463

Malicious code in bioql PyPI...

EUVD-2024-47499

Malicious code in bioql PyPI...

EUVD-2024-42420

Malicious code in bioql PyPI...

EUVD-2024-29928

Malicious code in bioql PyPI...

Missing Source Correlation of Multiple Independent Data

Overview next is a react framework. Affected versions of this package are vulnerable to Missing Source Correlation of Multiple Independent Data in image-optimizer. An attacker can cause arbitrary files to be downloaded with attacker-controlled content and filenames by supplying malicious external...

CVE-2025-54387

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...

CVE-2025-54387

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...

CVE-2025-54387 IPX is Vulnerable to Path Traversal via Prefix Matching Bypass

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...

CVE-2025-54387 IPX is Vulnerable to Path Traversal via Prefix Matching Bypass

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...