EUVD-2025-27118

Malicious code in bioql PyPI...

EUVD-2023-1826

Malicious code in bioql PyPI...

EUVD-2025-28815

Malicious code in bioql PyPI...

EUVD-2025-29239

Malicious code in bioql PyPI...

EUVD-2023-45697

Malicious code in bioql PyPI...

EUVD-2025-24087

Malicious code in bioql PyPI...

EUVD-2024-1924

Malicious code in bioql PyPI...

EUVD-2023-0403

Malicious code in bioql PyPI...

EUVD-2024-22158

Malicious code in bioql PyPI...

EUVD-2022-32384

Malicious code in bioql PyPI...

EUVD-2025-30391

Malicious code in bioql PyPI...

EUVD-2025-3142

Malicious code in bioql PyPI...

EUVD-2021-28301

Malicious code in bioql PyPI...

EUVD-2025-23144

Malicious code in bioql PyPI...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity due to an inefficient algorithmic complexity issue in the mjson parsing library when analyzing JSON content, such as with the jsonquery or jwtpayloadquery function. An attacker can cause resource...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...

Server-side Request Forgery (SSRF)

Overview org.apache.kylin:kylin-core-common is a package part of Apache Kylin. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted...

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38590 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the send hooks. An attacker can exhaust system resources by triggering excessive gas consumption through recursive calls in the wasm contract. Remediation Upgrade...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...