11106 matches found
Lovable VDP: Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable AI)
The API endpoint /workspaces//tool-preferences/aigateway/enable did not enforce proper authorization checks. As a result, an account with the Editor role was able to disable the workspace-wide admin-only Lovable AI feature, which powers key AI functionalities across the workspace...
Lovable VDP: Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable Cloud)
A vulnerability was discovered where an account with the Editor role could call an API endpoint that disabled workspace-wide admin-only features. This was due to a lack of server-side role checks, allowing a vertical privilege escalation...
EUVD-2025-25417
Malicious code in bioql PyPI...
EUVD-2024-39572
Malicious code in bioql PyPI...
EUVD-2022-32922
Malicious code in bioql PyPI...
EUVD-2022-30974
Malicious code in bioql PyPI...
EUVD-2023-12163
Malicious code in bioql PyPI...
EUVD-2023-33595
Malicious code in bioql PyPI...
EUVD-2021-9398
Malicious code in bioql PyPI...
EUVD-2025-29024
Malicious code in bioql PyPI...
EUVD-2024-0080
Malicious code in bioql PyPI...
EUVD-2024-48056
Malicious code in bioql PyPI...
EUVD-2024-16234
Malicious code in bioql PyPI...
EUVD-2025-19169
Malicious code in bioql PyPI...
EUVD-2022-33744
Malicious code in bioql PyPI...
EUVD-2023-12440
Malicious code in bioql PyPI...
EUVD-2023-54021
Malicious code in bioql PyPI...
EUVD-2024-54002
Malicious code in bioql PyPI...