EUVD-2022-1918

Malicious code in bioql PyPI...

EUVD-2022-38815

Malicious code in bioql PyPI...

EUVD-2024-51921

Malicious code in bioql PyPI...

EUVD-2024-23208

Malicious code in bioql PyPI...

EUVD-2023-28036

Malicious code in bioql PyPI...

EUVD-2022-38812

Malicious code in bioql PyPI...

EUVD-2024-34498

Malicious code in bioql PyPI...

EUVD-2024-30601

Malicious code in bioql PyPI...

EUVD-2022-38813

Malicious code in bioql PyPI...

EUVD-2023-58701

Malicious code in bioql PyPI...

EUVD-2022-0160

Malicious code in bioql PyPI...

EUVD-2024-40844

Malicious code in bioql PyPI...

EUVD-2022-1067

Malicious code in bioql PyPI...

EUVD-2023-54727

Malicious code in bioql PyPI...

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Impact In LXD's images export API /1.0/images/fingerprint/export, implementation differences in error handling allow determining project existence without authentication. Specifically, in the following code, errors when multiple images match are directly returned to users as API responses:...

CVE-2023-53511

In the Linux kernel, the following vulnerability has been resolved: iouring: fix fget leak when fs don't support nowait buffered read Heming reported a BUG when using iouring doing link-cp on ocfs2. 1 Do the following steps can reproduce this BUG: mount -t ocfs2 /dev/vdc /mnt/ocfs2 cp testfile...

CVE-2022-50457

In the Linux kernel, the following vulnerability has been resolved: mtd: core: Fix refcount error in delmtddevice delmtddevice will call ofnodeput to mtdgetofnodemtd, which is mtd-dev.ofnode. However, memset&mtd-dev, 0 is called before ofnodeput. As the result, ofnodeput won't do anything in...

CodeQL zero to hero part 5: Debugging queries

When you're first getting started with CodeQL, you may find yourself in a situation where a query doesn't return the results you expect. Debugging these queries can be tricky, because CodeQL is a Prolog-like language with an evaluation model that's quite different from mainstream languages like...

AZL-68103 CVE-2025-55552 affecting package pytorch for versions less than 2.2.2-9

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...

PYSEC-2025-204

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randnlike are used together...