EUVD-2025-21892

Malicious code in bioql PyPI...

EUVD-2024-2588

Malicious code in bioql PyPI...

EUVD-2025-13095

Malicious code in bioql PyPI...

EUVD-2025-2886

Malicious code in bioql PyPI...

EUVD-2023-1909

Malicious code in bioql PyPI...

EUVD-2023-51741

Malicious code in bioql PyPI...

EUVD-2023-1007

Malicious code in bioql PyPI...

EUVD-2022-38616

Malicious code in bioql PyPI...

EUVD-2024-36474

Malicious code in bioql PyPI...

EUVD-2022-39111

Malicious code in bioql PyPI...

EUVD-2024-35888

Malicious code in bioql PyPI...

EUVD-2024-20843

Malicious code in bioql PyPI...

EUVD-2023-46893

Malicious code in bioql PyPI...

EUVD-2023-32010

Malicious code in bioql PyPI...

EUVD-2025-9406

Malicious code in bioql PyPI...

EUVD-2025-6008

Malicious code in bioql PyPI...

RLSA-2025:9149 Moderate: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the...

RLSA-2025:9146 Moderate: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http...

Claude Code 安全漏洞

Claude Code is an open source proxy coding tool from Anthropic. A security vulnerability exists in Claude Code versions prior to 1.0.120 that stems from a failure to consider symbolic links when checking permission denial rules, which could lead to bypassing file access restrictions...

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties due to improper restriction of file read. An attacker can obtain sensitive information by sending crafted requests to exposed resources. Note: This is only exploitable if the attacker...