EUVD-2025-12060

Malicious code in bioql PyPI...

EUVD-2025-27358

Malicious code in bioql PyPI...

EUVD-2023-53734

Malicious code in bioql PyPI...

EUVD-2023-56353

Malicious code in bioql PyPI...

EUVD-2025-17127

Malicious code in bioql PyPI...

EUVD-2025-15515

Malicious code in bioql PyPI...

EUVD-2025-17639

Malicious code in bioql PyPI...

EUVD-2025-7207

Malicious code in bioql PyPI...

EUVD-2024-51510

Malicious code in bioql PyPI...

EUVD-2025-25294

Malicious code in bioql PyPI...

EUVD-2023-56891

Malicious code in bioql PyPI...

EUVD-2024-47726

Malicious code in bioql PyPI...

EUVD-2023-42308

Malicious code in bioql PyPI...

EUVD-2024-25159

Malicious code in bioql PyPI...

CVE-2025-61622

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stre...

Deserialization of Untrusted Data

Overview datachain is a Wrangle unstructured AI data at scale Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loader.py module. An attacker can execute arbitrary code by setting crafted environment variables that are deserialized by the application...

DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...

GHSA-6PX8-MR29-CJ4R DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...

GHSA-538V-3WQ9-4H3R Apache Pyfory python is vulnerable to deserialization of untrusted data

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stre...

Apache Pyfory python is vulnerable to deserialization of untrusted data

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stre...