EUVD-2024-1397

Malicious code in bioql PyPI...

EUVD-2022-3070

Malicious code in bioql PyPI...

EUVD-2022-51771

Malicious code in bioql PyPI...

EUVD-2024-2891

Malicious code in bioql PyPI...

EUVD-2024-1196

Malicious code in bioql PyPI...

EUVD-2025-26505

Malicious code in bioql PyPI...

EUVD-2022-3326

Malicious code in bioql PyPI...

EUVD-2024-2742

Malicious code in bioql PyPI...

EUVD-2025-16192

Malicious code in bioql PyPI...

EUVD-2024-1069

Malicious code in bioql PyPI...

EUVD-2024-1235

Malicious code in bioql PyPI...

EUVD-2024-27675

Malicious code in bioql PyPI...

EUVD-2024-1282

Malicious code in bioql PyPI...

EUVD-2024-1248

Malicious code in bioql PyPI...

EUVD-2024-54605

Malicious code in bioql PyPI...

EUVD-2025-16245

Malicious code in bioql PyPI...

User Enumeration

mautic/core is vulnerable to user enumeration. The vulnerability is due to differing response times between valid and invalid usernames, which allows an attacker to enumerate valid accounts and subsequently attempt brute-force attacks...

Improper Acess Control

mautic/core is vulnerable to improper access control. The vulnerability is due to insufficient restriction on configuration access, which allows an administrator to extract sensitive information such as database credentials...

Cross Site Scripting (XSS)

mautic/core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to unsanitized user-supplied input in the “Tags” field of the /s/ajax?action=lead:addLeadTags endpoint being reflected in the server response, which allows an attacker to execute arbitrary JavaScript in the victim’s...

CVE-2025-9822

SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available. ImpactAn administrator who usually does not have access to certain parameters, such as database credentials, can disclose them...