EUVD-2023-27718

Malicious code in bioql PyPI...

EUVD-2023-27719

Malicious code in bioql PyPI...

EUVD-2022-29633

Malicious code in bioql PyPI...

EUVD-2024-52859

Malicious code in bioql PyPI...

EUVD-2023-41366

Malicious code in bioql PyPI...

EUVD-2025-14803

Malicious code in bioql PyPI...

EUVD-2025-5074

Malicious code in bioql PyPI...

EUVD-2022-29635

Malicious code in bioql PyPI...

EUVD-2025-17571

Malicious code in bioql PyPI...

EUVD-2022-29634

Malicious code in bioql PyPI...

EUVD-2022-46746

Malicious code in bioql PyPI...

EUVD-2022-41824

Malicious code in bioql PyPI...

EUVD-2022-41827

Malicious code in bioql PyPI...

EUVD-2025-10696

Malicious code in bioql PyPI...

EUVD-2022-41828

Malicious code in bioql PyPI...

Metabase 1.52.x < 1.52.2.5

The version of Metabase installed on the remote host is 1.52.x prior to 1.52.2.5. It is, therefore, affected by a information disclosure vulnerability. For new sandboxing configurations created in 1.52.0 till 1.52.2.4, sandboxed users are able to see field filter values from other sandboxed users...

Metabase < 0.29.3 XSS

The version of Metabase installed on the remote host is prior to 0.29.3. It is, therefore, affected by a Cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Note that Nessus has not tested for this issue but has instead...

Metabase 0.41.x < 0.41.9 / 0.42.x < 0.42.6 / 0.43.x < 0.43.7 / 0.44.x < 0.44.5 / 1.41.x < 1.41.9 / 1.42.x < 1.42.6 / 1.43.x < 1.43.7 / 1.44.x < 1.44.5

The version of Metabase installed on the remote host is affected by multiple vulnerabilities: - a H2 Sample Database Remote Code Execution RCE, which can be abused by users able to write SQL queries on the H2 databases. Metabase fixed this issue to no longer allow DDL statements in H2 native...

Metabase < 0.44.5

The version of Metabase installed on the remote host is prior to 0.44.5. It is, therefore, affected by a The url parameter of the /api/geojson endpoint in Metabase versions 0.44.5 can be used to perform Server Side Request Forgery attacks. Previously implemented blacklists could be circumvented b...

Metabase 0.43.x < 0.43.7.1 / 0.44.x < 0.44.6.1 / 0.45.x < 0.45.2.1 / 1.43.x < 1.43.7.1 / 1.44.x < 1.44.6.1 / 1.45.x < 1.45.2.1

The version of Metabase installed on the remote host is affected by multiple vulnerabilities: - An information disclosure exposure of sensitive information to an Unauthorized Actor. Sandboxed users shouldn't be able to view data about other Metabase users anywhere in the Metabase application...