EUVD-2025-13598

Malicious code in bioql PyPI...

EUVD-2022-5587

Malicious code in bioql PyPI...

EUVD-2022-1497

Malicious code in bioql PyPI...

EUVD-2025-5096

Malicious code in bioql PyPI...

EUVD-2025-8082

Malicious code in bioql PyPI...

EUVD-2024-1422

Malicious code in bioql PyPI...

EUVD-2024-3218

Malicious code in bioql PyPI...

EUVD-2024-35888

Malicious code in bioql PyPI...

EUVD-2025-4463

Malicious code in bioql PyPI...

EUVD-2022-6071

Malicious code in bioql PyPI...

EUVD-2023-2737

Malicious code in bioql PyPI...

EUVD-2024-41686

Malicious code in bioql PyPI...

EUVD-2024-45362

Malicious code in bioql PyPI...

EUVD-2023-1856

Malicious code in bioql PyPI...

EUVD-2023-2961

Malicious code in bioql PyPI...

EUVD-2023-0615

Malicious code in bioql PyPI...

EUVD-2021-30719

Malicious code in bioql PyPI...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...

Authentication Bypass Using an Alternate Path or Channel

Overview org.apache.kylin:kylin-core-common is a package part of Apache Kylin. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the /api/user/updateuser endpoint. An attacker can gain unauthorized access by exploiting this endpoint t...

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties due to improper restriction of file read. An attacker can obtain sensitive information by sending crafted requests to exposed resources. Note: This is only exploitable if the attacker...