EUVD-2025-32122

Malicious code in bioql PyPI...

EUVD-2023-43648

Malicious code in bioql PyPI...

EUVD-2022-55233

Malicious code in bioql PyPI...

EUVD-2023-37258

Malicious code in bioql PyPI...

EUVD-2024-49631

Malicious code in bioql PyPI...

EUVD-2025-24030

Malicious code in bioql PyPI...

EUVD-2023-33065

Malicious code in bioql PyPI...

EUVD-2022-7006

Malicious code in bioql PyPI...

EUVD-2024-23242

Malicious code in bioql PyPI...

EUVD-2024-0055

Malicious code in bioql PyPI...

EUVD-2024-1531

Malicious code in bioql PyPI...

RLSA-2025:16154 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...

CVE-2025-59933

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

Deserialization of Untrusted Data

Overview datachain is a Wrangle unstructured AI data at scale Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loader.py module. An attacker can execute arbitrary code by setting crafted environment variables that are deserialized by the application...

GHSA-6PX8-MR29-CJ4R DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...

CVE-2025-57305

VitaraCharts 5.3.5 is vulnerable to Server-Side Request Forgery in fileLoader.jsp...

CVE-2025-57305

VitaraCharts 5.3.5 is vulnerable to Server-Side Request Forgery in fileLoader.jsp...

PT-2025-40450

Name of the Vulnerable Software and Affected Versions DataChain versions 0.34.1 and below Description DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. The library reads serialized objects from environment variables, specifically DATACHAIN METASTORE a...

CVE-2025-57443

FrostWire 6.14.0-build-326 for macOS contains permissive entitlements allow-dyld-environment-variables, disable-library-validation that allow unprivileged local attackers to inject code into the FrostWire process via the DYLDINSERTLIBRARIES environment variable. This allows escalated privileges t...

CVE-2025-57443

FrostWire 6.14.0-build-326 for macOS contains permissive entitlements allow-dyld-environment-variables, disable-library-validation that allow unprivileged local attackers to inject code into the FrostWire process via the DYLDINSERTLIBRARIES environment variable. This allows escalated privileges t...