2828 matches found
EUVD-2023-12974
Malicious code in bioql PyPI...
EUVD-2023-2769
Malicious code in bioql PyPI...
EUVD-2022-0851
Malicious code in bioql PyPI...
EUVD-2023-0745
Malicious code in bioql PyPI...
EUVD-2023-2497
Malicious code in bioql PyPI...
EUVD-2023-44066
Malicious code in bioql PyPI...
EUVD-2024-1898
Malicious code in bioql PyPI...
EUVD-2023-25045
Malicious code in bioql PyPI...
EUVD-2024-2379
Malicious code in bioql PyPI...
EUVD-2025-31766
Malicious code in bioql PyPI...
EUVD-2022-4298
Malicious code in bioql PyPI...
EUVD-2025-16408
Malicious code in bioql PyPI...
EUVD-2022-7233
Malicious code in bioql PyPI...
EUVD-2023-2156
Malicious code in bioql PyPI...
EUVD-2022-6279
Malicious code in bioql PyPI...
SUSE CVE-2025-59531
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate client...
SUSE CVE-2025-59537
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate client...
SUSE CVE-2025-59538
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...
CVE-2025-55191
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when...
Malicious Package
Overview mongodb-cd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...