EUVD-2023-3047

Malicious code in bioql PyPI...

EUVD-2024-22158

Malicious code in bioql PyPI...

EUVD-2025-3987

Malicious code in bioql PyPI...

EUVD-2023-2708

Malicious code in bioql PyPI...

EUVD-2022-7528

Malicious code in bioql PyPI...

EUVD-2024-0934

Malicious code in bioql PyPI...

EUVD-2023-0403

Malicious code in bioql PyPI...

EUVD-2023-51733

Malicious code in bioql PyPI...

EUVD-2021-28301

Malicious code in bioql PyPI...

EUVD-2024-22939

Malicious code in bioql PyPI...

EUVD-2022-43062

Malicious code in bioql PyPI...

EUVD-2024-2617

Malicious code in bioql PyPI...

EUVD-2024-54889

Malicious code in bioql PyPI...

EUVD-2022-1711

Malicious code in bioql PyPI...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity due to an inefficient algorithmic complexity issue in the mjson parsing library when analyzing JSON content, such as with the jsonquery or jwtpayloadquery function. An attacker can cause resource...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...

Server-side Request Forgery (SSRF)

Overview org.apache.kylin:kylin-core-common is a package part of Apache Kylin. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted...

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the send hooks. An attacker can exhaust system resources by triggering excessive gas consumption through recursive calls in the wasm contract. Remediation Upgrade...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...