EUVD-2025-23631

Malicious code in bioql PyPI...

EUVD-2021-9473

Malicious code in bioql PyPI...

EUVD-2021-33470

Malicious code in bioql PyPI...

EUVD-2025-9956

Malicious code in bioql PyPI...

EUVD-2025-9957

Malicious code in bioql PyPI...

EUVD-2022-28508

Malicious code in bioql PyPI...

EUVD-2024-46411

Malicious code in bioql PyPI...

EUVD-2024-39589

Malicious code in bioql PyPI...

EUVD-2025-9894

Malicious code in bioql PyPI...

EUVD-2025-5575

Malicious code in bioql PyPI...

EUVD-2025-13696

Malicious code in bioql PyPI...

EUVD-2023-55979

Malicious code in bioql PyPI...

EUVD-2024-44358

Malicious code in bioql PyPI...

EUVD-2023-12784

Malicious code in bioql PyPI...

EUVD-2021-27821

Malicious code in bioql PyPI...

RLSA-2025:13944 Important: openjpeg2 security update

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. Security Fixes: openjpeg: OpenJPEG OOB heap memory write CVE-2025-54874 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer ...

CVE-2025-61588

RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. In versions 2.0.2 and below of risc0-zkvm-platform, when the zkVM guest calls sysread, the host is able to use a crafted response to write to an arbitrary memory location in th...

RISC Zero Ethereum 代码注入漏洞

RISC Zero Ethereum is a computing platform open-sourced by RISC Zero. A code injection vulnerability exists in RISC Zero Ethereum that originates from a host that can write to an arbitrary memory location of a visitor using a specially crafted response, which could lead to the execution of...

CVE-2025-61588 risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`

RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. In versions 2.0.2 and below of risc0-zkvm-platform, when the zkVM guest calls sysread, the host is able to use a crafted response to write to an arbitrary memory location in th...

PT-2025-40308

Name of the Vulnerable Software and Affected Versions risc0-zkvm-platform versions 2.0.2 and below risc0-aggregation versions below 0.9 risc0-zkos-v1compat versions below 2.1.0 risc0-zkvm versions 3.0.0-rc.1 through 3.0.1 Description The software contains a flaw related to memory safety in the sy...