EUVD-2022-4987

Malicious code in bioql PyPI...

EUVD-2022-3976

Malicious code in bioql PyPI...

EUVD-2022-4693

Malicious code in bioql PyPI...

EUVD-2022-5780

Malicious code in bioql PyPI...

EUVD-2022-5680

Malicious code in bioql PyPI...

EUVD-2022-0656

Malicious code in bioql PyPI...

EUVD-2022-6021

Malicious code in bioql PyPI...

EUVD-2022-1216

Malicious code in bioql PyPI...

EUVD-2023-1377

Malicious code in bioql PyPI...

EUVD-2022-5074

Malicious code in bioql PyPI...

EUVD-2022-5816

Malicious code in bioql PyPI...

EUVD-2022-3009

Malicious code in bioql PyPI...

EUVD-2025-9534

Malicious code in bioql PyPI...

EUVD-2022-4430

Malicious code in bioql PyPI...

EUVD-2022-5637

Malicious code in bioql PyPI...

CVE-2025-53742

Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53657

Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53660

Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53667

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the job configuration form, where API keys are not masked. An attacker can obtain sensitive credentials by viewing the exposed API keys during job configuration. Remediation Upgrade...