EUVD-2024-42721

Malicious code in bioql PyPI...

EUVD-2024-32920

Malicious code in bioql PyPI...

EUVD-2025-25890

Malicious code in bioql PyPI...

EUVD-2025-15582

Malicious code in bioql PyPI...

EUVD-2024-38062

Malicious code in bioql PyPI...

EUVD-2025-15581

Malicious code in bioql PyPI...

EUVD-2024-42505

Malicious code in bioql PyPI...

EUVD-2024-15811

Malicious code in bioql PyPI...

EUVD-2022-4016

Malicious code in bioql PyPI...

EUVD-2023-44359

Malicious code in bioql PyPI...

EUVD-2022-1459

Malicious code in bioql PyPI...

EUVD-2022-0937

Malicious code in bioql PyPI...

EUVD-2025-1720

Malicious code in bioql PyPI...

EUVD-2025-24877

Malicious code in bioql PyPI...

EUVD-2025-25524

Malicious code in bioql PyPI...

EUVD-2025-18656

Malicious code in bioql PyPI...

Insufficient Session Expiration

weblate is vulnerable to Insufficient Session Expiration. The vulnerability is due to unsafe settings for the second factor in 2FA due to sessions being allowed to persist for an unusually long period, and an attacker can maintain a valid session to repeatedly attempt authentication, thereby...

[SECURITY] Fedora 41 Update: sqlite-3.46.1-5.fc41

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API

Impact LXD's operations API includes secret values necessary for WebSocket connections when retrieving information about running operations. These secret values are used for authentication of WebSocket connections for terminal and console sessions. Therefore, attackers with only read permissions...

DEBIAN-CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...