456 matches found
EUVD-2019-2159
Malware in sbrugna...
EUVD-2018-11772
Malware in sbrugna...
EUVD-2023-44105
Malicious code in bioql PyPI...
EUVD-2024-1274
Malicious code in bioql PyPI...
EUVD-2023-44107
Malicious code in bioql PyPI...
EUVD-2023-57529
Malicious code in bioql PyPI...
EUVD-2022-7536
Malicious code in bioql PyPI...
EUVD-2025-24599
Malicious code in bioql PyPI...
EUVD-2021-9372
Malicious code in bioql PyPI...
EUVD-2023-43699
Malicious code in bioql PyPI...
EUVD-2022-48057
Malicious code in bioql PyPI...
EUVD-2023-58792
Malicious code in bioql PyPI...
EUVD-2023-33549
Malicious code in bioql PyPI...
check-branches is vulnerable to command Injection
All versions of the package check-branches are vulnerable to Command Injection. check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...
CVE-2025-11148
CVE-2025-11148 - check-branches is vulnerable to command injection across all versions. The issue arises because the tool trusts branch names as plain text and constructs git commands by concatenating user input, which can be supplied via pull requests or privileged repo access. This allows an at...
CVE-2025-11148
All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...
PT-2025-40040
All versions of the package check-branches are vulnerable to Command Injection. check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...
PT-2025-39958
Name of the Vulnerable Software and Affected Versions check-branches affected versions not specified Description The software is susceptible to a command injection issue. The tool trusts branch names without sanitization and constructs git commands by concatenating user input. This allows attacke...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Linux Distros Unpatched Vulnerability : CVE-2025-5819
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed...