EUVD-2025-32015

Malicious code in bioql PyPI...

EUVD-2022-28938

Malicious code in bioql PyPI...

EUVD-2022-31084

Malicious code in bioql PyPI...

EUVD-2022-31086

Malicious code in bioql PyPI...

EUVD-2025-16071

Malicious code in bioql PyPI...

EUVD-2022-29659

Malicious code in bioql PyPI...

EUVD-2022-52662

Malicious code in bioql PyPI...

EUVD-2025-5098

Malicious code in bioql PyPI...

EUVD-2025-13277

Malicious code in bioql PyPI...

EUVD-2025-29175

Malicious code in bioql PyPI...

EUVD-2024-34437

Malicious code in bioql PyPI...

EUVD-2022-28937

Malicious code in bioql PyPI...

EUVD-2022-28930

Malicious code in bioql PyPI...

EUVD-2022-52895

Malicious code in bioql PyPI...

TOTOLINK X18 命令注入漏洞

TOTOLINK X18 is a Mesh WiFi 6 router system from TOTOLINK Taiwan, which supports WiFi 6 technology and optimizes home network coverage through the mesh function. TOTOLINK X18 suffers from a command injection vulnerability that stems from the mac parameter in the setEasyMeshAgentCfg function faili...

CVE-2025-59430

Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect. Prior to version 3.3.2, the lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. This is technically...

Cross-site Scripting (XSS)

Overview @meshconnect/web-link-sdk is an A client-side JS library for integrating with Mesh Connect Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLink.openLink function. An attacker can execute arbitrary JavaScript code in the context of the parent pag...

GHSA-VH3F-QPPR-J97F Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

Summary The lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. Details...

Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

Summary The lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. Details...

CVE-2025-59430

Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect. Prior to version 3.3.2, the lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. This is technically...