EUVD-2025-29550

Malicious code in bioql PyPI...

EUVD-2025-24430

Malicious code in bioql PyPI...

EUVD-2022-51032

Malicious code in bioql PyPI...

EUVD-2022-51035

Malicious code in bioql PyPI...

EUVD-2025-31004

Malicious code in bioql PyPI...

EUVD-2023-28840

Malicious code in bioql PyPI...

EUVD-2025-7905

Malicious code in bioql PyPI...

EUVD-2023-55690

Malicious code in bioql PyPI...

EUVD-2024-44589

Malicious code in bioql PyPI...

EUVD-2022-7476

Malicious code in bioql PyPI...

EUVD-2024-47370

Malicious code in bioql PyPI...

EUVD-2024-54933

Malicious code in bioql PyPI...

EUVD-2025-5209

Malicious code in bioql PyPI...

EUVD-2022-0879

Malicious code in bioql PyPI...

RLSA-2025:16428 Moderate: libtpms security update

The libtpms is a library providing Trusted Platform Module TPM functionality for virtual machines. Security Fixes: libtpms: Libtpms Out-of-Bounds Read Vulnerability CVE-2025-49133 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

WordPress plugin Comment Info Detector has a vulnerability related to cross-site request forgeing.

WordPress Comment Info Detector plugin is a WordPress plugin for displaying commenter browser and operating system information, developed by Kyle Baker. The WordPress Comment Info Detector plugin suffers from a cross-site request forgery vulnerability that stems from the options.php file not...

K000156758: GNOME GLib vulnerability CVE-2024-34397

Security Advisory Description An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bu...

External Initialization of Trusted Variables or Data Stores

Overview ch.qos.logback:logback-core is a logback-core module. Affected versions of this package are vulnerable to External Initialization of Trusted Variables or Data Stores via the conditional processing of the logback.xml configuration file when both the Janino library and Spring Framework are...

CVE-2025-11148

All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...

kernel security update

4.18.0-553.77.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...