EUVD-2025-24033

Malicious code in bioql PyPI...

EUVD-2025-24038

Malicious code in bioql PyPI...

EUVD-2025-24035

Malicious code in bioql PyPI...

EUVD-2025-24032

Malicious code in bioql PyPI...

EUVD-2025-19111

Malicious code in bioql PyPI...

EUVD-2025-19112

Malicious code in bioql PyPI...

OPENSUSE-SU-2025:15579-1 openbao-2.4.1-1.1 on GA media

These are all security issues fixed in the openbao-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gitsign, yace-fips, terraform-provider-time, prometheus-adapter, nvidia-nsight-compute-12.9, cloud-provider-aws-fips, cluster-api, sftpgo-plugin-geoipfilter, k8sgpt-operator, vault-benchmark, stakater-reloader, mattmoor-chainit, kubernetes-dashboard-fips,...

Linux Distros Unpatched Vulnerability : CVE-2025-52893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 m...

openbao-2.3.2-1.1 on GA media (moderate)

openbao-2.3.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15461-1 Rating: moderate Cross-References: CVE-2025-54996 CVE-2025-55000 CVE-2025-55003 CVE-2025-5999 CVE-2025-6000 CVE-2025-6004 CVE-2025-6010 CVE-2025-6011 CVE-2025-6013 CVE-2025-6014 CVE-2025-6015 CVSS scores: CVE-2025-6000 SUSE :...

OPENSUSE-SU-2025:15460-1 openbao-2.3.2-1.1 on GA media

These are all security issues fixed in the openbao-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed...

OpenBao has an unspecified vulnerability (CNVD-2025-18597)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause elevation of privilege...

OpenBao has an unspecified vulnerability (CNVD-2025-18598)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions, which can be exploited by attackers to cause MFA requirements to be bypassed...

OpenBao has an unspecified vulnerability (CNVD-2025-18599)

OpenBao is OpenBao open source a sensitive data management software . OpenBao has a security vulnerability that can be exploited by attackers to cause a brute-force crack...

OpenBao has an unspecified vulnerability (CNVD-2025-18600)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which can be exploited by attackers to cause information leakage...

OpenBao suffers from an unspecified vulnerability (CNVD-2025-18606)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by an attacker to cause bypassing of internal rate limiting and reuse of existing MFA code...

OpenBao suffers from an unspecified vulnerability (CNVD-2025-18607)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which stems from the TOTP key engine being able to accept valid code multiple times, and no details of the vulnerability are provided at this time...

OpenBao Code Injection Vulnerability

OpenBao is OpenBao open source a sensitive data management software . A code injection vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause unauthorized code execution and network access...

Improper Authentication

github.com/openbao/openbao is vulnerable to improper authentication. The vulnerability is due to unexpected normalization in the underlying TOTP library, which allows an attacker to reuse a valid TOTP code multiple times instead of only once...

Authentication Bypass

github.com/openbao/openbao is vulnerable to Authentication bypass. The vulnerability is due to improper normalization in the underlying TOTP library, which allows an attacker to bypass rate limiting by inserting whitespace and reuse existing MFA codes...