EUVD-2024-0344

Malicious code in bioql PyPI...

EUVD-2025-21905

Malicious code in bioql PyPI...

EUVD-2024-34992

Malicious code in bioql PyPI...

EUVD-2022-31306

Malicious code in bioql PyPI...

EUVD-2023-32458

Malicious code in bioql PyPI...

EUVD-2025-24125

Malicious code in bioql PyPI...

EUVD-2021-7233

Malicious code in bioql PyPI...

EUVD-2023-31689

Malicious code in bioql PyPI...

EUVD-2021-32314

Malicious code in bioql PyPI...

EUVD-2025-8989

Malicious code in bioql PyPI...

EUVD-2023-31889

Malicious code in bioql PyPI...

EUVD-2021-7203

Malicious code in bioql PyPI...

EUVD-2025-8890

Malicious code in bioql PyPI...

EUVD-2021-7207

Malicious code in bioql PyPI...

EUVD-2022-26079

Malicious code in bioql PyPI...

EUVD-2023-34266

Malicious code in bioql PyPI...

EUVD-2023-23668

Malicious code in bioql PyPI...

EUVD-2024-52601

Malicious code in bioql PyPI...

CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

Claude Code can execute commands prior to the startup trust dialog

Due to a bug in the startup trust dialog implementation, Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update...