EUVD-2023-1869

Malicious code in bioql PyPI...

EUVD-2022-0207

Malicious code in bioql PyPI...

EUVD-2022-38826

Malicious code in bioql PyPI...

EUVD-2021-28047

Malicious code in bioql PyPI...

EUVD-2021-28054

Malicious code in bioql PyPI...

EUVD-2021-28055

Malicious code in bioql PyPI...

EUVD-2022-6626

Malicious code in bioql PyPI...

EUVD-2024-3158

Malicious code in bioql PyPI...

EUVD-2022-0559

Malicious code in bioql PyPI...

EUVD-2025-6897

Malicious code in bioql PyPI...

ReDoS vulnerability in parser_apache2

...

GO-2025-3976 Grafana-Zabbix ReDoS vulnerability in github.com/alexanderzobnin/grafana-zabbix

Grafana-Zabbix ReDoS vulnerability in github.com/alexanderzobnin/grafana-zabbix. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners,...

@adishare/strapi-plugin-import-export-entries (1.23.2), @aller/svelte-components (1.5.17) +67 more potentially affected by CVE-2025-57350 via csvtojson (>=2.0.4, <=2.0.10)

csvtojson NPM version =2.0.4, =3.13.19, =0.0.0, =1.0.0, =0.0.132-alpha.448, =0.0.101-beta.22, =0.0.132-alpha.448, =0.0.132-beta.167, =0.0.101-beta.22, =1.0.0, =1.0.2 and more Source cves: CVE-2025-57350 Source advisory: SNYK:JS-CSVTOJSON-13109616...

CVE-2025-6921: Uncontrolled Resource Consumption

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in transformers-4.48.3-py3-none-any.whl

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-2099 DESCRIPTION: A vulnerability in the preprocessstring function of the transformers.testingutils module in huggingface/transformers version v4.48...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in transformers-4.48.3-py3-none-any.whl

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-1194 DESCRIPTION: A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in...

GHSA-G4RR-88FC-26FJ Grafana-Zabbix ReDoS vulnerability

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

Grafana-Zabbix ReDoS vulnerability

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

CVE-2025-10630

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

CVE-2025-10630: Improper Input Validation

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...