EUVD-2023-0355

Malicious code in bioql PyPI...

EUVD-2022-3546

Malicious code in bioql PyPI...

EUVD-2022-1970

Malicious code in bioql PyPI...

EUVD-2022-2086

Malicious code in bioql PyPI...

EUVD-2022-4612

Malicious code in bioql PyPI...

EUVD-2022-6200

Malicious code in bioql PyPI...

EUVD-2022-2189

Malicious code in bioql PyPI...

EUVD-2022-3802

Malicious code in bioql PyPI...

EUVD-2022-3266

Malicious code in bioql PyPI...

EUVD-2022-3550

Malicious code in bioql PyPI...

EUVD-2022-5202

Malicious code in bioql PyPI...

EUVD-2022-5919

Malicious code in bioql PyPI...

EUVD-2022-5971

Malicious code in bioql PyPI...

EUVD-2022-6002

Malicious code in bioql PyPI...

EUVD-2022-6187

Malicious code in bioql PyPI...

GHSA-223M-4RFP-646H Jenkins is missing a permission check in the authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

Jenkins is missing a permission check in the authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

Missing permission check in authenticated users' profile menu

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu...

CVE-2025-58459

Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs...

CVE-2025-58460

A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b92bcd64 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...