EUVD-2022-43489

Malicious code in bioql PyPI...

EUVD-2025-6551

Malicious code in bioql PyPI...

EUVD-2022-34110

Malicious code in bioql PyPI...

EUVD-2022-1987

Malicious code in bioql PyPI...

EUVD-2023-38777

Malicious code in bioql PyPI...

EUVD-2023-54670

Malicious code in bioql PyPI...

EUVD-2022-1120

Malicious code in bioql PyPI...

EUVD-2025-20904

Malicious code in bioql PyPI...

EUVD-2025-17042

Malicious code in bioql PyPI...

EUVD-2024-48783

Malicious code in bioql PyPI...

EUVD-2022-4221

Malicious code in bioql PyPI...

EUVD-2024-34229

Malicious code in bioql PyPI...

EUVD-2024-43394

Malicious code in bioql PyPI...

apache-commons-beanutils security update

An update is available for apache-commons-beanutils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Apache Commons BeanUtils library provides utility metho...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Commons (CVE-2025-48734)

Summary A vulnerability in Apache Commons that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2025-48734 DESCRIPTION: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used...

XML Injection

Overview Affected versions of this package are vulnerable to XML Injection when processing XML data with tags containing references to system properties or environment variables. An attacker can access sensitive information, such as credentials, file paths, or system configuration details, by...

Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"

...

CVE-2025-60018

CVE-2025-60018 affects glib-networking, specifically its OpenSSL backend, where BIO_write() return value is not properly checked, causing an out-of-bounds read. The issue is described across multiple sources as a vulnerability in the glib-networking OpenSSL backend, with the root cause being the ...

CVE-2025-60018 Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"

glib-networking's OpenSSL backend fails to properly check the return value of a call to BIOwrite, resulting in an out of bounds read...

commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

A flaw was found in Apache Commons BeanUtils. This vulnerability allows remote attackers to execute arbitrary code via uncontrolled access to the declaredClass property on Java enum objects, which can expose the class loader when property paths are passed from external sources to methods like...