3791 matches found
EUVD-2025-16936
Malicious code in bioql PyPI...
EUVD-2023-0786
Malicious code in bioql PyPI...
EUVD-2022-6077
Malicious code in bioql PyPI...
EUVD-2021-28047
Malicious code in bioql PyPI...
EUVD-2025-16512
Malicious code in bioql PyPI...
EUVD-2023-33742
Malicious code in bioql PyPI...
EUVD-2023-1038
Malicious code in bioql PyPI...
EUVD-2023-1869
Malicious code in bioql PyPI...
EUVD-2022-0569
Malicious code in bioql PyPI...
EUVD-2022-0207
Malicious code in bioql PyPI...
ReDoS vulnerability in parser_apache2
...
GO-2025-3976 Grafana-Zabbix ReDoS vulnerability in github.com/alexanderzobnin/grafana-zabbix
Grafana-Zabbix ReDoS vulnerability in github.com/alexanderzobnin/grafana-zabbix. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners,...
@adishare/strapi-plugin-import-export-entries (1.23.2), @aller/svelte-components (1.5.17) +67 more potentially affected by CVE-2025-57350 via csvtojson (>=2.0.4, <=2.0.10)
csvtojson NPM version =2.0.4, =3.13.19, =0.0.0, =1.0.0, =0.0.132-alpha.448, =0.0.101-beta.22, =0.0.132-alpha.448, =0.0.132-beta.167, =0.0.101-beta.22, =1.0.0, =1.0.2 and more Source cves: CVE-2025-57350 Source advisory: SNYK:JS-CSVTOJSON-13109616...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in transformers-4.48.3-py3-none-any.whl
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-2099 DESCRIPTION: A vulnerability in the preprocessstring function of the transformers.testingutils module in huggingface/transformers version v4.48...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in transformers-4.48.3-py3-none-any.whl
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-1194 DESCRIPTION: A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in...
GHSA-G4RR-88FC-26FJ Grafana-Zabbix ReDoS vulnerability
Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...
Grafana-Zabbix ReDoS vulnerability
Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...
CVE-2025-10630
Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...
CVE-2025-6051
CVE-2025-6051 is a ReDoS in Hugging Face Transformers’ EnglishNormalizer.normalize_numbers(), affecting versions up to 4.52.4 and fixed in 4.53.0. The issue arises from numeric string handling, enabling crafted inputs with long digit sequences to cause excessive CPU usage, impacting text-to-speec...
Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's removelanguagecode method. This vulnerability is present in version 4.52.4 and has been fixed in version 4.53.0. The issue arises from...