EUVD-2024-1331

Malicious code in bioql PyPI...

EUVD-2024-2846

Malicious code in bioql PyPI...

EUVD-2025-19725

Malicious code in bioql PyPI...

EUVD-2025-29100

Malicious code in bioql PyPI...

EUVD-2022-35608

Malicious code in bioql PyPI...

EUVD-2025-27707

Malicious code in bioql PyPI...

EUVD-2025-12823

Malicious code in bioql PyPI...

EUVD-2022-44858

Malicious code in bioql PyPI...

EUVD-2022-44856

Malicious code in bioql PyPI...

EUVD-2022-44854

Malicious code in bioql PyPI...

EUVD-2022-44855

Malicious code in bioql PyPI...

EUVD-2025-23280

Malicious code in bioql PyPI...

External Data Extraction Attacks against Retrieval-Augmented Large Language Models

In recent years, RAG has emerged as a key paradigm for enhancing large language models LLMs. By integrating externally retrieved information, RAG alleviates issues like outdated knowledge and, crucially, insufficient domain expertise. While effective, RAG introduces new risks of external data...

Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to incorrect binary execution [CVE-2025-47906]

Summary IBM App Connect Enterprise Certified Container operator and operands contain Golang binaries that are vulnerable to incorrect binary exection. This bulletin provides patch information to address the reported vulnerability in Golang module os/exec. CVE-2025-47906 Vulnerability Details...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.7.0 release

Red Hat OpenShift distributed tracing platform Tempo 3.7.0 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides new features, security improvements, and bug fixes. Breaking changes: Nothing Deprecations: Nothing Technology Preview features: Nothing...

Finding Phones Fast: Low-Latency and Scalable Monitoring of Cellular Communications in Sensitive Areas

The widespread availability of cellular devices introduces new threat vectors that allow users or attackers to bypass security policies and physical barriers and bring unauthorized devices into sensitive areas. These threats can arise from user non-compliance or deliberate actions aimed at data...

Incorrect Calculation

Overview tensorflow is a machine learning framework. Affected versions of this package are vulnerable to Incorrect Calculation via the Embedding operator that always outputs 0 without XLA when inputdim=1 is set. An attacker can cause the application to produce unpredictable or incorrect outputs b...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-22874 DESCRIPTION: Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, libnvidia-container, docker-cli, opa, tkn, aws-privateca-issuer, kubecolor, kapp, src, render-template, cni-plugins, ratify, argo-events, mongo-tools, cerbos, glow, kubernetes-dashboard-api, kubeflow-katib, dex, nri-redis, opentofu,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, nri-memcached, neuvector-sigstore-interface, ipfs-cluster, regclient, gcsfuse, clickhouse-operator, docker-machine-driver-harvester, ip-masq-agent, timescaledb-tune, dgraph, contour, k3s, wal-g, gobuster, terraform-mcp-server, controller-gen...