EUVD-2024-3158

Malicious code in bioql PyPI...

EUVD-2022-6318

Malicious code in bioql PyPI...

EUVD-2022-0021

Malicious code in bioql PyPI...

EUVD-2024-2910

Malicious code in bioql PyPI...

EUVD-2023-0144

Malicious code in bioql PyPI...

EUVD-2022-7438

Malicious code in bioql PyPI...

EUVD-2024-48018

Malicious code in bioql PyPI...

EUVD-2024-3189

Malicious code in bioql PyPI...

EUVD-2024-2963

Malicious code in bioql PyPI...

EUVD-2023-1086

Malicious code in bioql PyPI...

EUVD-2021-31502

Malicious code in bioql PyPI...

EUVD-2025-18708

Malicious code in bioql PyPI...

EUVD-2022-6077

Malicious code in bioql PyPI...

EUVD-2021-28056

Malicious code in bioql PyPI...

EUVD-2023-1525

Malicious code in bioql PyPI...

ReDoS vulnerability in parser_apache2

...

GO-2025-3976 Grafana-Zabbix ReDoS vulnerability in github.com/alexanderzobnin/grafana-zabbix

Grafana-Zabbix ReDoS vulnerability in github.com/alexanderzobnin/grafana-zabbix. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners,...

@adishare/strapi-plugin-import-export-entries (1.23.2), @aller/svelte-components (1.5.17) +67 more potentially affected by CVE-2025-57350 via csvtojson (>=2.0.4, <=2.0.10)

csvtojson NPM version =2.0.4, =3.13.19, =0.0.0, =1.0.0, =0.0.132-alpha.448, =0.0.101-beta.22, =0.0.132-alpha.448, =0.0.132-beta.167, =0.0.101-beta.22, =1.0.0, =1.0.2 and more Source cves: CVE-2025-57350 Source advisory: SNYK:JS-CSVTOJSON-13109616...

CVE-2025-6921: Uncontrolled Resource Consumption

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in transformers-4.48.3-py3-none-any.whl

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-2099 DESCRIPTION: A vulnerability in the preprocessstring function of the transformers.testingutils module in huggingface/transformers version v4.48...