EUVD-2023-3189

Malicious code in bioql PyPI...

EUVD-2023-3249

Malicious code in bioql PyPI...

EUVD-2025-12660

Malicious code in bioql PyPI...

EUVD-2022-6552

Malicious code in bioql PyPI...

EUVD-2023-2438

Malicious code in bioql PyPI...

EUVD-2022-1350

Malicious code in bioql PyPI...

EUVD-2024-2011

Malicious code in bioql PyPI...

EUVD-2023-0552

Malicious code in bioql PyPI...

EUVD-2025-27027

Malicious code in bioql PyPI...

EUVD-2024-3342

Malicious code in bioql PyPI...

EUVD-2023-2922

Malicious code in bioql PyPI...

EUVD-2023-1124

Malicious code in bioql PyPI...

EUVD-2022-1183

Malicious code in bioql PyPI...

EUVD-2024-2798

Malicious code in bioql PyPI...

EUVD-2023-0881

Malicious code in bioql PyPI...

EUVD-2025-21879

Malicious code in bioql PyPI...

EUVD-2024-2787

Malicious code in bioql PyPI...

Keycloak < 26.2.9 Multiple Vulnerabilities (GHSA-wc64-wmfm-46vw)(GHSA-xmcw-mv9p-7pq2)

The version of Keycloak installed on the remote host is prior to 26.2.9. It is, therefore, affected by multiple vulnerabilities as reference in the advisory GHSA-wc64-wmfm-46vw and GHSA-xmcw-mv9p-7pq2. - A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The...

No title provided

A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The previous fix for CVE-2024-10492 did not account for the Windows file separator . As a result, a high-privilege administrator could probe for the existence of files outside the expected realm context through...

org.keycloak/keycloak-model-storage-service: Variable injection into environment variables

A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...