EUVD-2021-31432

Malicious code in bioql PyPI...

EUVD-2025-30587

Malicious code in bioql PyPI...

EUVD-2025-17224

Malicious code in bioql PyPI...

EUVD-2022-42715

Malicious code in bioql PyPI...

EUVD-2025-26527

Malicious code in bioql PyPI...

EUVD-2024-54907

Malicious code in bioql PyPI...

EUVD-2025-30533

Malicious code in bioql PyPI...

EUVD-2022-35114

Malicious code in bioql PyPI...

EUVD-2025-31574

Malicious code in bioql PyPI...

EUVD-2025-31236

Malicious code in bioql PyPI...

EUVD-2024-34192

Malicious code in bioql PyPI...

EUVD-2024-44468

Malicious code in bioql PyPI...

EUVD-2023-23789

Malicious code in bioql PyPI...

perl-FCGI security update

An update is available for perl-FCGI. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FastCGI Perl bindings. Security Fixes: perl-fcgi: FCGI versions 0.44 throu...

@4via6/relay (>=1.0.0 <=1.1.3), @axonpush/wizard (>=0.0.1 <=0.0.4) +13 more potentially affected by CVE-2025-59829 via @anthropic-ai/claude-code (>=0.2.126 <=1.0.119)

@anthropic-ai/claude-code NPM version =0.2.126, =1.0.0, =0.0.1, =0.0.55, =2.13.0-canary.3413b9c, =1.0.0, =0.4.2, =0.0.1, =0.0.1, =1.8.0, =0.1.51, =1.4.0, =0.0.1, =0.0.1, =0.0.5 Source cves: CVE-2025-59829 Source advisory: OSV:GHSA-66M2-GX93-V996...

WordPress plugin RestroPress 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An information...

CVE-2025-51495

A vulnerability was identified in the WebSocket component of Mongoose package versions 7.5 through 7.17. An attacker can exploit this flaw by sending a specially crafted request to a targeted application. Successful exploitation results in the application crashing, creating a denial of service. I...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0 <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0 <=2.8.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4 <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0, =2.5.0, =2.5.0, =2.8.0 Source cves: CVE-2025-61735 Source advisory: SNYK:JAVA-ORGAPACHEKYLIN-13181847...

Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected. Users are recommended to upgrade to version 5.0.3, which fixes the issue...

CVE-2025-61735

Server-Side Request Forgery SSRF vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected. Users are recommended to upgrade to version 5.0.3, which fixes the issue...