DEBIAN-CVE-2025-61912

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...

CVE-2025-61912

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...

CVE-2025-61911

Summary: The issue CVE-2025-61911 affects python-ldap up to version 3.4.4 (pre-3.4.5). When using ldap.filter.escape_filter_chars with escape_mode=1, the function can fail to fully escape characters if assertion_value is a crafted list or dict, risking LDAP injection. The 3.4.5 fix adds a type ch...

EUVD-2025-33797

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...

EUVD-2008-0837

Malware in sbrugna...

EUVD-2019-10155

Malware in sbrugna...

EUVD-2009-0029

Malware in sbrugna...

EUVD-2022-26048

Malicious code in bioql PyPI...

EUVD-2025-29209

Malicious code in bioql PyPI...

EUVD-2022-35369

Malicious code in bioql PyPI...

EUVD-2025-32028

Malicious code in bioql PyPI...

EUVD-2022-35406

Malicious code in bioql PyPI...

EUVD-2022-35349

Malicious code in bioql PyPI...

EUVD-2025-32242

Malicious code in bioql PyPI...

EUVD-2025-12559

Malicious code in bioql PyPI...

EUVD-2024-43803

Malicious code in bioql PyPI...

EUVD-2025-27022

Malicious code in bioql PyPI...

EUVD-2022-35354

Malicious code in bioql PyPI...

CVE-2025-27231

The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change...

PT-2025-40512

Name of the Vulnerable Software and Affected Versions Versions prior to the fix where the 'Bind password' value is reset on 'Host' change. Description A Super Admin account can potentially leak the LDAP 'Bind password' value by changing the LDAP 'Host' to a rogue LDAP server. The 'Bind password'...