EUVD-2022-40015

Malicious code in bioql PyPI...

EUVD-2022-29257

Malicious code in bioql PyPI...

EUVD-2022-40014

Malicious code in bioql PyPI...

EUVD-2024-23165

Malicious code in bioql PyPI...

EUVD-2024-48600

Malicious code in bioql PyPI...

EUVD-2024-46540

Malicious code in bioql PyPI...

EUVD-2024-28259

Malicious code in bioql PyPI...

EUVD-2022-42613

Malicious code in bioql PyPI...

EUVD-2022-45482

Malicious code in bioql PyPI...

EUVD-2025-24184

Malicious code in bioql PyPI...

EUVD-2023-31140

Malicious code in bioql PyPI...

EUVD-2025-1917

Malicious code in bioql PyPI...

EUVD-2023-31141

Malicious code in bioql PyPI...

RLSA-2025:7593 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: Ghostscript: NPDL device: Compression buffer overflow CVE-2025-27832 For more details...

ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PD...

SUSE CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...

Improper Input Validation

Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Improper Input Validation via the HTML entity decoding logic in the client-side PDF export pipeline. An attacker can explo...

Cross-site Scripting (XSS)

Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Cross-site Scripting XSS via incomplete HTML sanitization in the client-side PDF export pipeline. An attacker can exploit...

UBUNTU-CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...