EUVD-2024-17998

Malicious code in bioql PyPI...

EUVD-2024-24977

Malicious code in bioql PyPI...

EUVD-2024-2112

Malicious code in bioql PyPI...

EUVD-2024-48240

Malicious code in bioql PyPI...

EUVD-2024-1056

Malicious code in bioql PyPI...

EUVD-2025-22019

Malicious code in bioql PyPI...

EUVD-2025-22957

Malicious code in bioql PyPI...

EUVD-2025-22955

Malicious code in bioql PyPI...

EUVD-2025-22954

Malicious code in bioql PyPI...

EUVD-2025-6903

Malicious code in bioql PyPI...

EUVD-2025-32133

Malicious code in bioql PyPI...

EUVD-2025-23878

Malicious code in bioql PyPI...

EUVD-2024-48948

Malicious code in bioql PyPI...

EUVD-2025-7680

Malicious code in bioql PyPI...

CVE-2025-56381

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the orderby and groupby parameters...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the /api/user/updateuser endpoint. An attacker can gain unauthorized access by exploiting this endpoint to bypass authentication mechanisms. Remediation Upgrade...

CVE-2025-56381

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the orderby and groupby parameters...

PT-2025-40039

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...

CVE-2025-29156

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...

CVE-2025-29156

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...