EUVD-2025-2416

Malicious code in bioql PyPI...

EUVD-2025-0158

Malicious code in bioql PyPI...

EUVD-2025-7046

Malicious code in bioql PyPI...

EUVD-2022-33323

Malicious code in bioql PyPI...

EUVD-2022-46750

Malicious code in bioql PyPI...

EUVD-2024-54700

Malicious code in bioql PyPI...

EUVD-2022-33321

Malicious code in bioql PyPI...

EUVD-2023-2419

Malicious code in bioql PyPI...

EUVD-2022-3271

Malicious code in bioql PyPI...

EUVD-2022-24458

Malicious code in bioql PyPI...

EUVD-2023-32027

Malicious code in bioql PyPI...

EUVD-2025-16670

Malicious code in bioql PyPI...

EUVD-2022-36125

Malicious code in bioql PyPI...

EUVD-2022-7479

Malicious code in bioql PyPI...

RLSA-2025:7459 Moderate: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Razer Synapse...

CVE-2025-6051 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the normalizenumbers method of the EnglishNormalizer class. This vulnerability affects versions up to 4.52.4 and is fixed in version 4.53.0. The issue arises fro...

Regular Expression Denial of Service (ReDoS)

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the removelanguagecode function in the MarianTokenizer class, when handling malformed language code...

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the data: URL handler. An attacker can trigger a denial of service by crafting a data: URL with a...

CVE-2025-56405

An issue was discovered in litmusautomation litmus-mcp-server thru 0.0.1 allowing unauthorized attackers to control the target's MCP service through the SSE protocol...