Malicious Package

Overview annotate-pure-calls is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

GHSA-WMWF-9CCG-FFF5 Apache Tomcat Vulnerable to Relative Path Traversal

The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the request URI to bypass security constraints including the...

Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library

Summary A bypass vulnerability where, despite CVE-2024-38820 ensuring Locale-independent lowercase conversion for disallowedFields patterns and request parameter names, there are still cases where it is possible to bypass the disallowedFields checks . Vulnerability Details CVEID:CVE-2025-22233...

EUVD-2020-28341

Malware in sbrugna...

EUVD-2021-0458

Malware in sbrugna...

EUVD-2014-5860

Malware in sbrugna...

EUVD-2021-0140

Malware in sbrugna...

EUVD-2023-29129

Malicious code in bioql PyPI...

EUVD-2024-46244

Malicious code in bioql PyPI...

EUVD-2023-0835

Malicious code in bioql PyPI...

EUVD-2024-0065

Malicious code in bioql PyPI...

EUVD-2024-53292

Malicious code in bioql PyPI...

EUVD-2023-43080

Malicious code in bioql PyPI...

EUVD-2024-0975

Malicious code in bioql PyPI...

EUVD-2024-0123

Malicious code in bioql PyPI...

EUVD-2025-4651

Malicious code in bioql PyPI...

EUVD-2023-32296

Malicious code in bioql PyPI...

EUVD-2023-2603

Malicious code in bioql PyPI...

EUVD-2022-41841

Malicious code in bioql PyPI...

EUVD-2022-0154

Malicious code in bioql PyPI...