EUVD-2015-0281

Malware in sbrugna...

EUVD-2018-0531

Malware in sbrugna...

EUVD-2018-0720

Malware in sbrugna...

EUVD-2018-0626

Malware in sbrugna...

EUVD-2018-0590

Malware in sbrugna...

EUVD-2019-0633

Malware in sbrugna...

EUVD-2018-0505

Malware in sbrugna...

EUVD-2018-0573

Malware in sbrugna...

EUVD-2018-0683

Malware in sbrugna...

EUVD-2023-1629

Malicious code in bioql PyPI...

EUVD-2024-41743

Malicious code in bioql PyPI...

EUVD-2025-5507

Malicious code in bioql PyPI...

EUVD-2023-2001

Malicious code in bioql PyPI...

EUVD-2022-1884

Malicious code in bioql PyPI...

EUVD-2025-0161

Malicious code in bioql PyPI...

Server-Side Request Forgery (SSRF)

Apache Ranger is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation due to the Edit Service Page in the UI allowing crafted requests that can trigger unintended internal or external network calls...

CVE-2024-45479

SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue...

CVE-2024-45478

Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue...

CSV Injection

org.apache.ranger, security-admin-web is vulnerable to CSV Injection. The vulnerability is due to improper neutralization of formula elements due to insufficient sanitization of exported CSV data, allowing malicious formulas to execute when opened in a spreadsheet application...

CVE-2024-55532

Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version 2.6.0. Users are recommended to upgrade to version 2.6.0, which fixes this issue...