EUVD-2021-29259

Malicious code in bioql PyPI...

EUVD-2024-18414

Malicious code in bioql PyPI...

EUVD-2025-7046

Malicious code in bioql PyPI...

EUVD-2023-28813

Malicious code in bioql PyPI...

EUVD-2025-2416

Malicious code in bioql PyPI...

EUVD-2024-23491

Malicious code in bioql PyPI...

EUVD-2024-43751

Malicious code in bioql PyPI...

EUVD-2024-41556

Malicious code in bioql PyPI...

EUVD-2023-31123

Malicious code in bioql PyPI...

EUVD-2024-28305

Malicious code in bioql PyPI...

EUVD-2021-9327

Malicious code in bioql PyPI...

EUVD-2022-6209

Malicious code in bioql PyPI...

EUVD-2022-53479

Malicious code in bioql PyPI...

EUVD-2024-54700

Malicious code in bioql PyPI...

RLSA-2025:7459 Moderate: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Razer Synapse...

CVE-2025-6051 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the normalizenumbers method of the EnglishNormalizer class. This vulnerability affects versions up to 4.52.4 and is fixed in version 4.53.0. The issue arises fro...

Regular Expression Denial of Service (ReDoS)

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the removelanguagecode function in the MarianTokenizer class, when handling malformed language code...

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the data: URL handler. An attacker can trigger a denial of service by crafting a data: URL with a...

CVE-2025-56405

An issue was discovered in litmusautomation litmus-mcp-server thru 0.0.1 allowing unauthorized attackers to control the target's MCP service through the SSE protocol...