EUVD-2023-26748

Malicious code in bioql PyPI...

EUVD-2025-29523

Malicious code in bioql PyPI...

EUVD-2023-23687

Malicious code in bioql PyPI...

EUVD-2024-40268

Malicious code in bioql PyPI...

EUVD-2021-9079

Malicious code in bioql PyPI...

EUVD-2025-22995

Malicious code in bioql PyPI...

EUVD-2023-43016

Malicious code in bioql PyPI...

EUVD-2022-28035

Malicious code in bioql PyPI...

EUVD-2023-28096

Malicious code in bioql PyPI...

EUVD-2022-0042

Malicious code in bioql PyPI...

EUVD-2025-20074

Malicious code in bioql PyPI...

EUVD-2022-28024

Malicious code in bioql PyPI...

EUVD-2023-29543

Malicious code in bioql PyPI...

EUVD-2022-0929

Malicious code in bioql PyPI...

CVE-2025-10547 CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

PYSEC-2025-106

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

PT-2025-40290

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.25 Django versions 5.1 through 5.1.13 Django versions 5.2 through 5.2.7 Description A SQL injection issue exists in Django’s QuerySet methods—specifically annotate, alias, aggregate, and extra—when using a craft...

CVE-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

Improper Validation of Function Hook Arguments

Overview Affected versions of this package are vulnerable to Improper Validation of Function Hook Arguments in the /api/webhook endpoint via the affectedRevisionInfo function. An attacker can cause the server process to crash and disrupt service availability by sending a Gogs push event whose JSO...

Improper Validation of Function Hook Arguments

Overview Affected versions of this package are vulnerable to Improper Validation of Function Hook Arguments in the /api/webhook endpoint via the affectedRevisionInfo function. An attacker can cause the server process to crash and disrupt service availability by sending a Gogs push event whose JSO...