EUVD-2022-7448

Malicious code in bioql PyPI...

EUVD-2022-7468

Malicious code in bioql PyPI...

EUVD-2022-7202

Malicious code in bioql PyPI...

EUVD-2025-8704

Malicious code in bioql PyPI...

EUVD-2025-21778

Malicious code in bioql PyPI...

EUVD-2025-3990

Malicious code in bioql PyPI...

EUVD-2022-2651

Malicious code in bioql PyPI...

EUVD-2025-21791

Malicious code in bioql PyPI...

EUVD-2022-53389

Malicious code in bioql PyPI...

EUVD-2023-51731

Malicious code in bioql PyPI...

EUVD-2023-3277

Malicious code in bioql PyPI...

EUVD-2023-1018

Malicious code in bioql PyPI...

EUVD-2025-8201

Malicious code in bioql PyPI...

EUVD-2024-0375

Malicious code in bioql PyPI...

CVE-2025-59933

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

Security update for podman

This update for podman fixes the following issues: CVE-2025-6032: Fixed machine init command failing to verify TLS certificate bsc1245320 Fix conditional Requires remove deprecated sleversion macro Update to version 5.4.2: Add release notes for v5.4.2 Fix a potential deadlock during podman cp...

rke2-1.33-1.33.5+rke2r1-1.1 on GA media (moderate)

rke2-1.33-1.33.5+rke2r1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15569-1 Rating: moderate Cross-References: CVE-2025-1974 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2025-10619

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the...

PT-2025-38233

Name of the Vulnerable Software and Affected Versions: CISA Thorium versions prior to 1.1.2 Description: CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. This allows an unauthenticated attacker with access to a Thorium cluster to impersonate the Elasticsearch...

GHSA-9G9J-RGGX-7FMG [email protected] contains malware after npm account takeover

Impact On 8 September 2025, the npm publishing account for simple-swizzle was taken over after a phishing attack. Version 0.2.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency transactions to the attacker'...