EUVD-2025-11531

Malicious code in bioql PyPI...

EUVD-2022-7259

Malicious code in bioql PyPI...

EUVD-2022-25003

Malicious code in bioql PyPI...

EUVD-2025-21920

Malicious code in bioql PyPI...

EUVD-2022-43220

Malicious code in bioql PyPI...

EUVD-2023-25633

Malicious code in bioql PyPI...

EUVD-2022-48741

Malicious code in bioql PyPI...

EUVD-2022-27844

Malicious code in bioql PyPI...

EUVD-2022-0817

Malicious code in bioql PyPI...

EUVD-2023-24187

Malicious code in bioql PyPI...

EUVD-2023-46317

Malicious code in bioql PyPI...

CVE-2025-10244

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...

CVE-2025-10244

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...

CVE-2025-10244 HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...

CVE-2025-10244

CVE-2025-10244 affects Autodesk Fusion desktop app via a Stored Cross-site Scripting (XSS) condition triggered by a malicious HTML payload rendered by the application. The vulnerability can allow reading local files or executing arbitrary code in the context of the current process. Reported CVSSv...

PT-2025-39164

Name of the Vulnerable Software and Affected Versions Autodesk Fusion desktop app affected versions not specified Description A specially crafted HTML payload, when processed by the application, can lead to a Stored Cross-site Scripting XSS condition. Successful exploitation may allow a malicious...

CVE-2025-59340 jinjava Sandbox Bypass via JavaType-Based Deserialization

jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper.getTypeFactory.constructFromCanonical, it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classe...

CVE-2025-59340 jinjava Sandbox Bypass via JavaType-Based Deserialization

jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper.getTypeFactory.constructFromCanonical, it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classe...

PT-2025-38270

Name of the Vulnerable Software and Affected Versions jinjava versions prior to 2.8.1 Description jinjava is a Java-based template engine. A sandbox escape flaw exists due to unrestricted interaction with the properties of JinjavaInterpreter instances, specifically through the ObjectMapper. By...

CVE-2025-59341: Relative Path Traversal

esm.sh is a nobuild content delivery networkCDN for modern web development. In 136 and earlier, a Local File Inclusion LFI issue was identified in the esm.sh service URL handling. An attacker could craft a request that causes the server to read and return files from the host filesystem or other...