CVE-2026-44939 Command injection through unsanitized YAML parameter in Rancher

A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/tokenclusterId.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers...

Rancher cloud credentials can be used through proxy API by users without access

A vulnerability was discovered in Rancher 2.2.0 through the aforementioned patched versions, where cloud credentials weren't being properly validated through the Rancher API. Specifically through a proxy designed to communicate with cloud providers. Any Rancher user that was logged-in and aware o...

EUVD-2021-1233

Malware in sbrugna...

EUVD-2021-12217

Malware in sbrugna...

EUVD-2025-10799

Malicious code in bioql PyPI...

EUVD-2022-2822

Malicious code in bioql PyPI...

EUVD-2025-6275

Malicious code in bioql PyPI...

EUVD-2024-2002

Malicious code in bioql PyPI...

EUVD-2023-26781

Malicious code in bioql PyPI...

EUVD-2022-2368

Malicious code in bioql PyPI...

EUVD-2023-0449

Malicious code in bioql PyPI...

EUVD-2022-52825

Malicious code in bioql PyPI...

EUVD-2025-0078

Malicious code in bioql PyPI...

EUVD-2024-3170

Malicious code in bioql PyPI...

EUVD-2024-3054

Malicious code in bioql PyPI...

EUVD-2024-2981

Malicious code in bioql PyPI...

EUVD-2024-2807

Malicious code in bioql PyPI...

EUVD-2022-5793

Malicious code in bioql PyPI...

EUVD-2022-2020

Malicious code in bioql PyPI...

EUVD-2023-0404

Malicious code in bioql PyPI...