188 matches found
EUVD-2023-36658
Malicious code in bioql PyPI...
EUVD-2025-9008
Malicious code in bioql PyPI...
EUVD-2022-26765
Malicious code in bioql PyPI...
EUVD-2021-8530
Malicious code in bioql PyPI...
EUVD-2024-1283
Malicious code in bioql PyPI...
EUVD-2024-2735
Malicious code in bioql PyPI...
EUVD-2022-30943
Malicious code in bioql PyPI...
EUVD-2023-2028
Malicious code in bioql PyPI...
CVE-2025-43275
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...
Amazon Linux 2 : java-17-amazon-corretto (ALAS-2025-2936)
The version of java-17-amazon-corretto installed on the remote host is prior to 17.0.16+8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2936 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product...
CVE-2025-43266
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...
CVE-2025-43241
CVE-2025-43241 affects macOS: a permissions issue may allow an app to read files outside its sandbox. Fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. Impact: potential confidentiality risk (high). The issue is described as a permissions restriction problem; root cause ...
EulerOS 2.0 SP12 : python-jinja2 (EulerOS-SA-2025-1839)
According to the versions of the python-jinja2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filte...
openjdk: Better Glyph drawing (Oracle CPU 2025-07)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1;...
CVE-2025-49131 FastGPT Sandbox Vulnerable to Sandbox Bypass
FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container fastgpt-sandbox is a specialized, isolated environment used by FastGPT to safely execute user-submitted or dynamically generated...
CVE-2025-49131 FastGPT Sandbox Vulnerable to Sandbox Bypass
FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container fastgpt-sandbox is a specialized, isolated environment used by FastGPT to safely execute user-submitted or dynamically generated...
CVE-2025-5321
The CVE-2025-5321 entry affects aimhubio Aim up to 3.29.1, targeting the RestrictedPythonQuery function in /aim/storage/query.py (run_view Object Handler). The vulnerability arises from manipulation of the argument (Query/Abfrage) that can lead to elevated privileges and sandbox issues, enabling ...
CVE-2025-24115
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox...
CVE-2024-54498
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to break out of its sandbox...