EUVD-2025-25938

Malicious code in bioql PyPI...

EUVD-2025-25420

Malicious code in bioql PyPI...

EUVD-2022-45985

Malicious code in bioql PyPI...

EUVD-2025-28785

Malicious code in bioql PyPI...

EUVD-2025-24810

Malicious code in bioql PyPI...

EUVD-2025-6021

Malicious code in bioql PyPI...

EUVD-2024-16689

Malicious code in bioql PyPI...

EUVD-2022-29318

Malicious code in bioql PyPI...

EUVD-2025-25195

Malicious code in bioql PyPI...

EUVD-2022-24989

Malicious code in bioql PyPI...

EUVD-2025-24040

Malicious code in bioql PyPI...

EUVD-2024-40161

Malicious code in bioql PyPI...

RLSA-2025:14826 Important: postgresql16 security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

postgresql16 security update

An update is available for postgresql16. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostgreSQL is an advanced Object-Relational database management system...

Discourse < 3.5.1 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

SUSE CVE-2025-39912

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing pageio data Otherwise if the nfsd filecache code releases the nfsdfile immediately, it can trigger the BUGONcred == current-cred in putcred when it puts the nfsdfile-nffile-f-cred...

CVE-2025-59337

Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...

CVE-2025-59337 Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments

Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...

CVE-2025-59337 Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments

Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...

CVE-2025-59337

Summary: CVE-2025-59337 affects Discourse prior to 3.5.1. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore, enabling an admin of one multisite deployment to access data or credentials from other sites. Root cause: backup restorati...