EUVD-2025-31819

Malicious code in bioql PyPI...

EUVD-2025-27617

Malicious code in bioql PyPI...

EUVD-2025-6939

Malicious code in bioql PyPI...

EUVD-2022-37792

Malicious code in bioql PyPI...

EUVD-2025-25506

Malicious code in bioql PyPI...

EUVD-2025-27765

Malicious code in bioql PyPI...

EUVD-2023-44379

Malicious code in bioql PyPI...

EUVD-2025-2671

Malicious code in bioql PyPI...

EUVD-2024-29343

Malicious code in bioql PyPI...

EUVD-2024-1325

Malicious code in bioql PyPI...

EUVD-2025-7017

Malicious code in bioql PyPI...

EUVD-2024-50704

Malicious code in bioql PyPI...

EUVD-2022-43593

Malicious code in bioql PyPI...

EUVD-2024-17695

Malicious code in bioql PyPI...

EUVD-2025-22403

Malicious code in bioql PyPI...

EUVD-2023-42424

Malicious code in bioql PyPI...

EUVD-2021-9284

Malicious code in bioql PyPI...

Server-Side Request Forgery (SSRF)

mautic/core is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to missing validation of webhook destinations, which allows an attacker with webhook permissions to send crafted requests and potentially access internal services, bypassing firewalls...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview marimo is an A library for making reactive notebooks and apps Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the /mpl/port/ endpoint, which acts as an unauthenticated proxy. An attacker can access internal services and arbitrary...

GHSA-XJV7-6W92-42R7 marimo vulnerable to proxy abuse of /mpl/{port}/

Summary The /mpl// endpoint, which is accessible without authentication on default Marimo installations allows for external attackers to reach internal services and arbitrary ports. Details From our understanding, this route is used internally to provide access to interactive matplotlib...