EUVD-2024-0659

Malicious code in bioql PyPI...

EUVD-2023-54406

Malicious code in bioql PyPI...

EUVD-2022-0104

Malicious code in bioql PyPI...

EUVD-2023-54408

Malicious code in bioql PyPI...

EUVD-2023-54405

Malicious code in bioql PyPI...

EUVD-2024-0631

Malicious code in bioql PyPI...

EUVD-2023-0078

Malicious code in bioql PyPI...

EUVD-2022-0103

Malicious code in bioql PyPI...

EUVD-2023-1250

Malicious code in bioql PyPI...

EUVD-2025-28980

Malicious code in bioql PyPI...

EUVD-2025-15450

Malicious code in bioql PyPI...

EUVD-2022-1268

Malicious code in bioql PyPI...

CVE-2025-58065

Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface...

abi-ds-utils (1.0.1), acceldata-o2a (1.0.0) +134 more potentially affected by CVE-2025-58065 via flask-appbuilder (>=4.1.2, <=4.6.3)

flask-appbuilder PYPI version =4.1.2, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.2.1, =0.4.0, =0.1.0a1, =0.8.2, =0.1.1, =0.1.1, =1.10.6 - airflow-cyberark-secrets-backend 0.1.0 - airflow-dagfactory 0.19.1 and more Source cves: CVE-2025-58065 Source advisory: SNYK:PYTHON-FLASKAPPBUILDER-12670...

Improper Authentication

Overview Flask-AppBuilder is a simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Affected versions of this package are vulnerable to Improper Authentication via the reset my...

CVE-2025-58065

Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface...

abi-ds-utils (1.0.1), acceldata-o2a (1.0.0) +248 more potentially affected by CVE-2025-58065 via flask-appbuilder (>=1.10.0, <=4.6.3)

flask-appbuilder PYPI version =1.10.0, =0.8.44.4rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.1.0rc3, =2022.9.19, =0.2.1, =0.2.9b1, =1.0.7, =0.4.0, =0.1.0a1, =0.5.1, =1.4.0 and more Source cves: CVE-2025-58065 Source advisory: MEND:CVE-2025-58065...

CVE-2025-58065

Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), airflow-add-ons (0.2.9b2) +16 more potentially affected by CVE-2025-58065 via flask-appbuilder (3.4.5)

flask-appbuilder PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-appbuilder and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =2.0.2rc1, =0.0.4rc1, =0.0.0, =0.5.2, =0.8.3a...

doc-tour (>=0.1.2, <=0.1.4) potentially affected by CVE-2025-58065 via flask-appbuilder (2.2.2)

flask-appbuilder PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-appbuilder and may be impacted: - doc-tour =0.1.2, =0.1.4 Source cves: CVE-2025-58065 Source advisory: OSV:GHSA-765J-9R45-W2Q2...