EUVD-2021-26945

Malware in sbrugna...

EUVD-2023-0709

Malicious code in bioql PyPI...

EUVD-2025-21313

Malicious code in bioql PyPI...

EUVD-2025-12427

Malicious code in bioql PyPI...

EUVD-2022-7187

Malicious code in bioql PyPI...

EUVD-2025-17571

Malicious code in bioql PyPI...

EUVD-2025-12487

Malicious code in bioql PyPI...

EUVD-2025-22858

Malicious code in bioql PyPI...

EUVD-2025-17566

Malicious code in bioql PyPI...

EUVD-2025-13306

Malicious code in bioql PyPI...

EUVD-2025-12426

Malicious code in bioql PyPI...

EUVD-2025-17580

Malicious code in bioql PyPI...

EUVD-2023-59663

Malicious code in bioql PyPI...

CVE-2025-58451: Inefficient Regular Expression Complexity

Cattown is a JavaScript markdown parser. Versions prior to 1.0.2 used regular expressions with inefficient, potentially exponential worst-case complexity. This could cause excessive CPU usage due to excessive backtracking on crafted inputs. In turn, the excessive CPU usage could lead to resource...

CVE-2025-9670

A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been released...

CVE-2025-9670: Inefficient Regular Expression Complexity

A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been released...

CVE-2025-9308

A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects...

CVE-2025-9308 yarnpkg Yarn request-manager.js setOptions redos

A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects...

CVE-2025-9308

CVE-2025-9308 affects yarnpkg Yarn up to 1.22.22. The vulnerability is in the function setOptions of src/util/request-manager.js, where manipulation leads to inefficient regular expression complexity. Local access is required. The advisory consistently indicates the issue affects products that ar...

Yarn security vulnerability

Yarn is an open source package installation, management tool from Yarn Open Source. A security vulnerability exists in Yarn 1.22.22 and earlier versions that stems from insufficient regular expression complexity...