EUVD-2023-39812

Malicious code in bioql PyPI...

CVE-2023-35817

DevExpress before 23.1.3 allows AsyncDownloader SSRF...

CVE-2023-35817

DevExpress prior to version 23.1.3 is vulnerable to Server-Side Request Forgery (SSRF) via AsyncDownloader. Affected software is DevExpress before 23.1.3; root cause is SSRF in AsyncDownloader. Public references and vendor advisories confirm the issue and provide remediation guidance: upgrade to ...