EUVD-2023-34248

Malicious code in bioql PyPI...

Command injection

Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command...