EUVD-2025-25459

Malicious code in bioql PyPI...

EUVD-2025-3685

Malicious code in bioql PyPI...

EUVD-2022-51041

Malicious code in bioql PyPI...

EUVD-2022-6475

Malicious code in bioql PyPI...

EUVD-2025-7252

Malicious code in bioql PyPI...

EUVD-2023-32724

Malicious code in bioql PyPI...

EUVD-2021-2854

Malicious code in bioql PyPI...

EUVD-2023-12380

Malicious code in bioql PyPI...

EUVD-2023-50426

Malicious code in bioql PyPI...

EUVD-2024-36608

Malicious code in bioql PyPI...

EUVD-2024-36609

Malicious code in bioql PyPI...

EUVD-2022-45322

Malicious code in bioql PyPI...

EUVD-2022-40941

Malicious code in bioql PyPI...

EUVD-2022-30426

Malicious code in bioql PyPI...

EUVD-2023-38001

Malicious code in bioql PyPI...

EUVD-2022-48088

Malicious code in bioql PyPI...

CVE-2025-49222

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2, 10.10.x = 10.10.0 fail to validate upload types in remote cluster upload sessions which allows a system admin to upload non-attachment file types via shared channels that could potentially be placed in...

GHSA-H469-4FCF-P23H Mattermost has Potential Server Crash due to Unvalidated Import Data

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.0, 10.9.x = 10.9.3 fail to validate import data which allows a system admin to crash the server via the bulk import feature...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input in the bulk import feature. An attacker can cause the server to crash by submitting malformed import data as a system administrator. Remediation Upgrade...

CVE-2025-8402

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.0, 10.9.x = 10.9.3 fail to validate import data which allows a system admin to crash the server via the bulk import feature...