EUVD-2023-35079

Malicious code in bioql PyPI...

EUVD-2025-19304

Malicious code in bioql PyPI...

EUVD-2025-19972

Malicious code in bioql PyPI...

EUVD-2025-28368

Malicious code in bioql PyPI...

EUVD-2024-46022

Malicious code in bioql PyPI...

EUVD-2023-29433

Malicious code in bioql PyPI...

EUVD-2024-35513

Malicious code in bioql PyPI...

EUVD-2025-7978

Malicious code in bioql PyPI...

EUVD-2024-41319

Malicious code in bioql PyPI...

EUVD-2023-57500

Malicious code in bioql PyPI...

EUVD-2022-33219

Malicious code in bioql PyPI...

EUVD-2025-13912

Malicious code in bioql PyPI...

EUVD-2024-31711

Malicious code in bioql PyPI...

EUVD-2022-49954

Malicious code in bioql PyPI...

Connect Your AI to Everything: Spring AI's MCP Boot Starters

The Model Context Protocol MCP standardizes how AI applications interact with external tools and resources. Spring joined the MCP ecosystem early as a key contributor, helping to develop and maintain the official MCP Java SDK that serves as the foundation for Java-based MCP implementations...

Malicious code in stand-nearby-weather (npm)

The package stand-nearby-weather was found to contain malicious code...

MAL-2025-46136 Malicious code in stand-nearby-weather (npm)

The package stand-nearby-weather was found to contain malicious code...

CVE-2025-8062

The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wsweather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-8062 WS Theme Addons <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode

The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wsweather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-8062

The CVE-2025-8062 entry concerns WordPress WS Theme Addons plugin vulnerability (Shortcode ws_weather) allowing Stored Cross-Site Scripting. Affected versions: all up to 2.0.0. Root cause: insufficient input sanitization and output escaping on user-supplied shortcode attributes, enabling an authe...