EUVD-2025-5079

Malicious code in bioql PyPI...

EUVD-2025-19960

Malicious code in bioql PyPI...

EUVD-2023-0326

Malicious code in bioql PyPI...

EUVD-2024-0914

Malicious code in bioql PyPI...

EUVD-2022-7072

Malicious code in bioql PyPI...

EUVD-2022-7187

Malicious code in bioql PyPI...

EUVD-2022-1677

Malicious code in bioql PyPI...

EUVD-2022-0444

Malicious code in bioql PyPI...

EUVD-2024-0807

Malicious code in bioql PyPI...

EUVD-2024-0839

Malicious code in bioql PyPI...

EUVD-2024-0906

Malicious code in bioql PyPI...

EUVD-2023-2840

Malicious code in bioql PyPI...

EUVD-2022-1428

Malicious code in bioql PyPI...

0x-hunter-core (>=1.0.0-13, <=1.0.1-5), 0x-relayer-cat (>=0.0.3, <=0.0.10) +2129 more potentially affected by CVE-2025-57329 via web3-core-method (>=1.0.0-beta.52, <=1.10.3)

web3-core-method NPM version =1.0.0-beta.52, =1.0.0-13, =0.0.3, =0.0.31, =0.1.0, =0.115.0, =0.115.0, =0.115.0, =0.46.0, =0.46.0, =0.115.0, =0.115.0, =0.50.0, =0.115.0, =0.123.2 and more Source cves: CVE-2025-57329 Source advisory: OSV:GHSA-2J4C-9QQQ-896R...

messageformat 安全漏洞

messageformat is a messageformat open source ICU message format and Unicode message format library for Javascript. A security vulnerability exists in messageformat versions prior to 3.0.1, which stems from insufficient validation of nested message keys and could lead to a prototype pollution atta...

CVE-2025-57328

toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...

Security Bulletin: TS4500 Tape Library/Diamondback Tape Library addresses security vulnerability CVE-2021-23450

Summary The tape library web GUI used an outdated version of the JavaScript library dojo.js containing a prototype pollution vulnerability. This could potentially be leveraged to facilitate XSS attacks in the browser, or, if executed server-side, to enable remote code execution. The issue has bee...

GHSA-G38C-WXJF-XRH6 `git-comiters` Command Injection vulnerability

Background on the vulnerability This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not saniti...

Malicious code in javascript-auth0-selenology-blaze (npm)

The package javascript-auth0-selenology-blaze was found to contain malicious code...

libmozjs-128-0-128.14.0-1.1 on GA media (moderate)

libmozjs-128-0-128.14.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15494-1 Rating: moderate Cross-References: CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185 CVSS scores: CVE-2025-9179 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-9180 SUSE : 8.1...