ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1918 more potentially affected by CVE-2026-45536 via io.netty:netty-transport-native-kqueue (>=4.2.0.final, <=4.2.14.final)

io.netty:netty-transport-native-kqueue MAVEN version =4.2.0.final, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =25.10.2, =0.1.0-m36, =0.1.0-m48 and more Source cves: CVE-2026-45536 Source advisory: OSV:GHSA-W573-9FFJ-6FF9...

fr.vsct.tock:tock-bot-admin-server (>=0.2.0, <=0.2.9), fr.vsct.tock:tock-nlp-admin-server (>=0.1, <=0.2.9) +8 more potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (1.7.1)

org.apache.opennlp:opennlp-tools MAVEN version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.opennlp:opennlp-tools and may be impacted: - fr.vsct.tock:tock-bot-admin-server =0.2.0, =0.1, =0.1, =0.1, =0.1, =0.1, =0.2.9 -...

ai.tock:bot-test (>=22.3.0, <=24.9.8), ai.tock:bot-test-base (>=22.3.0, <=24.9.8) +1308 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (>=1.4.0, <=5.7.9)

org.pac4j:pac4j-core MAVEN version =1.4.0, =22.3.0, =22.3.0, =22.3.0, =22.3.0, =22.3.0, =23.9.0, =22.3.0, =22.3.0, =22.3.0, =22.3.0, =22.3.0, =22.3.0, =22.3.0, =22.3.0, =22.3.0, =24.9.8 and more Source cves: CVE-2026-40458 Source advisory: MEND:CVE-2026-40458...

EUVD-2018-1990

Malware in sbrugna...

EUVD-2025-2800

Malicious code in bioql PyPI...

CVE-2018-1000660

TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed. For example dfde28196cd12071fcf6669f7654be7df482b85d contains a Insecure Permissions vulnerability in Function getpackagename in the file kernel/src/tbfheader.rs, variable "pub packagename: &'static str," in the file process.r...

CVE-2025-22520

Cross-Site Request Forgery CSRF vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: from n/a through = 1.1...

CVE-2025-22520

Cross-Site Request Forgery CSRF vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: from n/a through = 1.1...

CVE-2025-22520

CVE-2025-22520 – Tock Widget CSRF (Cross-Site Request Forgery) Connected sources confirm a CSRF vulnerability affecting the Tock Widget (Tock Widget,

CVE-2025-22520 WordPress Tock Widget Plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: from n/a through = 1.1...

CVE-2025-22520 WordPress Tock Widget Plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: from n/a through = 1.1...

WordPress Tock Widget Plugin <= 1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Tock Widget versions = 1.1...

CVE-2025-22520: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: from n/a through = 1.1...

PT-2025-4513 · Unknown · Tock Widget

Name of the Vulnerable Software and Affected Versions: Tock Widget versions n/a through 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross Site Request Forgery. This is a type of attack where an attacker can trick a user into performing...

WordPress plugin Tock Widget has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

fr.vsct.tock:bot-test (>=19.3.2, <=19.3.3), fr.vsct.tock:bot-test-base (>=19.3.2, <=19.3.3) +7 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (7.4)

com.nimbusds:nimbus-jose-jwt MAVEN version 7.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - fr.vsct.tock:bot-test =19.3.2, =19.3.2, =19.3.2, =19.3.2, =19.3.2, =19.3.2, =19.3.2, =19.3.2,...

ai.tock:tock-shared (>=19.9.4, <=26.9.0), at.austriapro:ebinterface-rendering (>=1.0.0, <=1.0.1) +1996 more potentially affected by CVE-2022-44729 via org.apache.xmlgraphics:batik-bridge (>=1.6.1, <=1.16)

org.apache.xmlgraphics:batik-bridge MAVEN version =1.6.1, =19.9.4, =1.0.0, =1.0.7, =1.10.2, =1.13.0, =0.1.1, =0.5.0, =0.11.1, =0.0.2, =0.2.1 - berlin.softwaretechnik:geojsonrenderer2.13 0.0.1 - bio.ferlab:obo-parser2.12 1.3.1 and more Source cves: CVE-2022-44729 Source advisory: GHSA-GQ5F-XV48-23...

ai.tock:tock-nlp-dialogflow (23.3.0), ai.tock:tock-stt-google-speech (23.3.0) +1333 more potentially affected by CVE-2023-32731 via io.grpc:grpc-protobuf (>=1.54.0, <=1.54.1)

io.grpc:grpc-protobuf MAVEN version =1.54.0, =1.0.0, =1.0.0, =2022.3.2.0, =0.0.33, =0.0.71, =0.0.33, =0.0.33, =0.0.33, =0.0.34 - cn.vertxup:aeon-aurora 0.9.0 - cn.vertxup:aeon-inlet 0.9.0 - cn.vertxup:aeon-up 0.9.0 and more Source cves: CVE-2023-32731 Source advisory: OSV:GHSA-CFGP-2977-2FMM...

ai.deepsense:seahorse-executor-deeplang_2.11 (>=1.4.2, <=1.4.3), ai.h2o:h2o-persist-gcs (>=3.20.0.1, <=3.32.1.5) +1920 more potentially affected by CVE-2020-7692 via com.google.oauth-client:google-oauth-client (>=1.5.0-alpha, <=1.30.6)

com.google.oauth-client:google-oauth-client MAVEN version =1.5.0-alpha, =1.4.2, =3.20.0.1, =2.1.44, =3.30.0.5-1-3.0, =2.1.44, =3.30.0.5-1-3.0, =2.1.44, =3.30.0.5-1-3.0, =2.1.44, =0.1.2, =19.9.0, =19.9.0, =19.9.0, =19.9.1, =19.9.0, =20.3.2-2 and more Source cves: CVE-2020-7692 Source advisory:...

CVE-2018-1000660

TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed. For example dfde28196cd12071fcf6669f7654be7df482b85d contains a Insecure Permissions vulnerability in Function getpackagename in the file kernel/src/tbfheader.rs, variable "pub packagename: &'static str," in the file process.r...