EUVD-2024-54906

Malicious code in bioql PyPI...

EUVD-2025-7543

Malicious code in bioql PyPI...

EUVD-2025-21233

Malicious code in bioql PyPI...

EUVD-2025-7545

Malicious code in bioql PyPI...

EUVD-2025-7563

Malicious code in bioql PyPI...

EUVD-2025-12463

Malicious code in bioql PyPI...

EUVD-2024-51423

Malicious code in bioql PyPI...

EUVD-2025-7544

Malicious code in bioql PyPI...

EUVD-2024-21484

Malicious code in bioql PyPI...

EUVD-2024-51424

Malicious code in bioql PyPI...

EUVD-2025-19242

Malicious code in bioql PyPI...

EUVD-2024-51422

Malicious code in bioql PyPI...

EUVD-2025-21230

Malicious code in bioql PyPI...

com.playtika.testcontainers:embedded-minio (>=1.44, <=1.48), io.github.open-util:minio-springboot-starter (>=1.0.0, <=1.0.3) potentially affected by CVE-2025-59952 via io.minio:minio (7.0.1)

io.minio:minio MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.minio:minio and may be impacted: - com.playtika.testcontainers:embedded-minio =1.44, =1.0.0, =1.0.3 Source cves: CVE-2025-59952 Source advisory: OSV:GHSA-H7RH-XFPJ-HP...

CVE-2024-48988

SQL Injection vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue. This vulnerability is present only in the distribution package SpringBoot platform and does not involve Maven...

CVE-2024-48988: SQL Injection: Hibernate

SQL Injection vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue. This vulnerability is present only in the distribution package SpringBoot platform and does not involve Maven...

org.apache.camel.karaf:camel-as2 (>=4.7.0, <=4.8.9), org.apache.camel.karaf:camel-as2-test (>=4.7.0, <=4.8.9) +6 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-debug-jdk18on (>=1.71, <=1.78)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.71, =4.7.0, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.2.0, =3.18.0, =3.18.0, =3.18.0, =4.8.9 Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789690...

CVE-2025-7488 JoeyBling SpringBoot_MyBatisPlus download path traversal

A vulnerability has been found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical. This vulnerability affects the function Download of the file /file/download. The manipulation of the argument Name leads to path traversal. The attack can b...

CVE-2025-7488 JoeyBling SpringBoot_MyBatisPlus download path traversal

A vulnerability has been found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical. This vulnerability affects the function Download of the file /file/download. The manipulation of the argument Name leads to path traversal. The attack can b...

CVE-2025-7488

The CVE-2025-7488 entry concerns JoeyBling SpringBoot_MyBatisPlus (up to a6a825513bd688f717dbae3a196bc9c9622fea26). The vulnerability resides in the Download function handling the /file/download endpoint, where manipulating the Name argument enables path traversal. It is described as remotely exp...