EUVD-2023-32435

Malicious code in bioql PyPI...

EUVD-2022-52163

Malicious code in bioql PyPI...

EUVD-2023-0484

Malicious code in bioql PyPI...

EUVD-2025-6210

Malicious code in bioql PyPI...

EUVD-2022-25119

Malicious code in bioql PyPI...

EUVD-2024-32291

Malicious code in bioql PyPI...

EUVD-2021-29042

Malicious code in bioql PyPI...

EUVD-2022-15480

Malicious code in bioql PyPI...

EUVD-2022-52569

Malicious code in bioql PyPI...

EUVD-2022-3767

Malicious code in bioql PyPI...

EUVD-2022-42526

Malicious code in bioql PyPI...

EUVD-2023-23380

Malicious code in bioql PyPI...

EUVD-2024-47656

Malicious code in bioql PyPI...

EUVD-2023-44658

Malicious code in bioql PyPI...

EUVD-2023-55683

Malicious code in bioql PyPI...

EUVD-2022-34535

Malicious code in bioql PyPI...

EUVD-2022-24746

Malicious code in bioql PyPI...

EUVD-2024-2787

Malicious code in bioql PyPI...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of torch-2.6.0-cp313-cp313-manylinux1x8664.whl Vulnerability Details CVEID:CVE-2025-3000 DESCRIPTION: A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The...

httpsig-rs: HMAC verification is vulnerable to timing attack

Summary HMAC signature comparison is not timing-safe and is vulnerable to timing attacks. Details SharedKey::sign returns a Vec which has a non-constant-time equality implementation. Hmac::finalize returns a constant-time wrapper CtOutput which was discarded. Alternatively, Hmac has a constant-ti...