EUVD-2022-0181

Malicious code in bioql PyPI...

EUVD-2023-0884

Malicious code in bioql PyPI...

EUVD-2023-1236

Malicious code in bioql PyPI...

EUVD-2024-0068

Malicious code in bioql PyPI...

EUVD-2023-50542

Malicious code in bioql PyPI...

EUVD-2022-7478

Malicious code in bioql PyPI...

EUVD-2022-7619

Malicious code in bioql PyPI...

EUVD-2022-7611

Malicious code in bioql PyPI...

EUVD-2022-7667

Malicious code in bioql PyPI...

EUVD-2022-7737

Malicious code in bioql PyPI...

EUVD-2021-30693

Malicious code in bioql PyPI...

EUVD-2023-30089

Malicious code in bioql PyPI...

EUVD-2023-2743

Malicious code in bioql PyPI...

Arbitrary File Write

github.com/harness/gitness is vulnerable to Arbitrary file write. The vulnerability is due to improper sanitization of the upload path, which allows an attacker to craft a malicious upload request and write arbitrary files to any location on the file system...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via improper sanitization of the upload path in the upload process. An attacker can write arbitrary files to any location on the file system, potentially compromising the server, by sending a crafted upload request...

CVE-2025-58158

Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server Gitness exposes api to retrieve and upload files via git LFS. Implementation ...

CVE-2025-58158 Harness Affected by Arbitrary File Write in Gitness LFS server

Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server Gitness exposes api to retrieve and upload files via git LFS. Implementation ...

PT-2025-35297

Name of the Vulnerable Software and Affected Versions Harness Open Source versions prior to 3.3.0 Description Harness Open Source’s git Large File Storage LFS server Gitness exposes APIs for retrieving and uploading files via git LFS. The implementation of the upload git LFS file API is susceptib...

Linux Distros Unpatched Vulnerability : CVE-2019-10182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from elements in JNLP files. An attacker could trick a victim into running ...

CVE-2025-34154: Improper Limitation of a Pathname to a Restricted Directory

UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient input validation and lack of path...