EUVD-2025-31634

Malicious code in bioql PyPI...

CVE-2025-57266

An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthenticated attackers to gain sensitive information such as API Keys via the /api/assistant/list endpoint...

CVE-2025-57266

The ThriveX Blogging Framework (versions 2.5.9 through 3.1.3 ) is vulnerable to an improper access control issue in the AssistantController.java file. This flaw allows unauthenticated attackers to access the /api/assistant/list endpoint to obtain sensitive information, specifically API Keys . To ...