EUVD-2022-28543

Malicious code in bioql PyPI...

EUVD-2022-28535

Malicious code in bioql PyPI...

EUVD-2024-35885

Malicious code in bioql PyPI...

EUVD-2025-1948

Malicious code in bioql PyPI...

EUVD-2023-26859

Malicious code in bioql PyPI...

EUVD-2024-2317

Malicious code in bioql PyPI...

EUVD-2023-1231

Malicious code in bioql PyPI...

EUVD-2025-0008

Malicious code in bioql PyPI...

EUVD-2024-22146

Malicious code in bioql PyPI...

EUVD-2024-19787

Malicious code in bioql PyPI...

EUVD-2023-2683

Malicious code in bioql PyPI...

EUVD-2023-3029

Malicious code in bioql PyPI...

EUVD-2023-1241

Malicious code in bioql PyPI...

EUVD-2024-53113

Malicious code in bioql PyPI...

EUVD-2022-6483

Malicious code in bioql PyPI...

EUVD-2022-6087

Malicious code in bioql PyPI...

CVE-2025-59829 Claude Code: Permission deny bypass is possible through symlink

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

CVE-2025-59829

CVE-2025-59829 affects Claude Code (Anthropic) prior to version 1.0.120. The root cause is improper handling of symbolic links when evaluating permission-deny rules, enabling a user-denied file to be accessed via a symlink pointing to that file. The issue is fixed in 1.0.120. Impact is exposure o...

[SECURITY] [DSA 6018-1] gegl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6018-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 03, 2025 https://www.debian.org/security/faq -...

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.

...