EUVD-2022-28662

Malicious code in bioql PyPI...

EUVD-2025-12575

Malicious code in bioql PyPI...

EUVD-2025-13252

Malicious code in bioql PyPI...

EUVD-2025-16207

Malicious code in bioql PyPI...

EUVD-2025-18362

Malicious code in bioql PyPI...

EUVD-2024-0410

Malicious code in bioql PyPI...

EUVD-2025-23553

Malicious code in bioql PyPI...

EUVD-2023-3041

Malicious code in bioql PyPI...

EUVD-2024-26472

Malicious code in bioql PyPI...

EUVD-2023-0383

Malicious code in bioql PyPI...

This Week in Spring: September 30th, 2025

Hi, Spring fans! As I write this I am about to board a flight for Colorado for the amazing Dev2Next conference! I'll be in Antwerp, Beglium for the amazing Devoxx event next week, and I'll be speaking at the Amsterdam JUG with James Ward on the Thursday after that, too! If you're around, be sure ...

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 PoC Objective Reproduce, explo...

CicadasCMS 代码注入漏洞

CicadasCMS is a content management framework based on SpringBoot Mybatis SpringSecurity Vue developed by westboy individual developers in China. A code injection vulnerability exists in CicadasCMS version 1.0, which originates from the incorrect operation of the parameter categoryName in the file...

A Bootiful Podcast: Spring Batch lead Mahmoud Ben Hassine

Hi, Spring fans! In this installment we talk to the legendary lead of the Spring Batch project, Mahmoud Ben Hassine, about the latest-and-greatest in Spring Batch in the Spring Boot 4 generation...

This Week in Spring - September 23rd, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm preparing my talks for several amazing shows including: Commit Your Code conference in Plano, Texas starting tomorrow; Dev2Next in Colorado; Devoxx Belgium in Antwerp, Belgium; and CloudFoundry Days in Germany. So much go...

The vulnerability of the development environment for web applications in Atlassian Connect Spring Boot, related to authentication procedures that allow attackers to bypass the authentication process

The vulnerability of the development environment for web applications built with Atlassian Connect Spring Boot is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process...

CVE-2025-41249 vulnerabilities

Vulnerabilities for packages: conductor, apache-nifi, apache-activemq-fips, nacos-docker, thingsboard, apache-activemq, apache-hop, camunda-zeebe, conductor-fips, apache-hop-fips, keycloak-config-cli, zipkin, jenkins, nacos, apache-nifi-registry...

GHSA-JMP9-X22R-554X vulnerabilities

Vulnerabilities for packages: conductor, apache-nifi, apache-activemq-fips, nacos-docker, thingsboard, apache-activemq, apache-hop, camunda-zeebe, conductor-fips, apache-hop-fips, keycloak-config-cli, zipkin, jenkins, nacos, apache-nifi-registry...

CVE-2025-41243

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when all the following are true: The application is using Spring Cloud Gateway Server Webflux Spring Cloud Gateway Server WebMVC is not vulnerable...

CVE-2025-41243: Improper Neutralization of Special Elements used in an Expression Language Statement

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when all the following are true: The application is using Spring Cloud Gateway Server Webflux Spring Cloud Gateway Server WebMVC is not vulnerable...