EUVD-2022-24956

Malicious code in bioql PyPI...

EUVD-2023-24093

Malicious code in bioql PyPI...

EUVD-2022-34766

Malicious code in bioql PyPI...

EUVD-2022-35022

Malicious code in bioql PyPI...

EUVD-2024-47955

Malicious code in bioql PyPI...

EUVD-2025-1734

Malicious code in bioql PyPI...

EUVD-2022-34962

Malicious code in bioql PyPI...

EUVD-2022-35064

Malicious code in bioql PyPI...

EUVD-2022-52155

Malicious code in bioql PyPI...

EUVD-2022-34963

Malicious code in bioql PyPI...

EUVD-2022-28274

Malicious code in bioql PyPI...

EUVD-2024-32778

Malicious code in bioql PyPI...

CVE-2024-7998

In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan...

CVE-2024-4456

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting payload on the audit page...

CVE-2024-4226

It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed...

CVE-2024-4811

In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts...

CVE-2024-6972

In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the task log in clear-text...

CVE-2023-1904

In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server...

CVE-2022-2508

In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user does not have access to due to verbose error messaging...

CVE-2022-4898

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was take...