EUVD-2024-27308

Malicious code in bioql PyPI...

EUVD-2022-51694

Malicious code in bioql PyPI...

EUVD-2022-1985

Malicious code in bioql PyPI...

EUVD-2024-27221

Malicious code in bioql PyPI...

EUVD-2025-3891

Malicious code in bioql PyPI...

EUVD-2025-32164

Malicious code in bioql PyPI...

EUVD-2023-12884

Malicious code in bioql PyPI...

EUVD-2024-27527

Malicious code in bioql PyPI...

MAL-2025-47881 Malicious code in coder-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2ddf9a60ebc68bffd364ac4fda53541ff6d6967a0fc5344e4d082f207aa27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coder-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2ddf9a60ebc68bffd364ac4fda53541ff6d6967a0fc5344e4d082f207aa27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview coder-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

K000156725: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2020-25663 A call to ConformPixelInfo in the SetImageAlphaChannel routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed or GetPixelBlue was called. This could occur if an attacker is able to submit ...

K000156721: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2020-27752 A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but cou...

K000156693: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2016-7101 The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service out-of-bounds read via a large row value in an sgi file. CVE-2016-7513 Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a...

GO-2025-3938 Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder

Coder vulnerable to privilege escalation could lead to a cross workspace compromise in github.com/coder/coder...

GO-2025-3921 Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder...

CVE-2025-58437

Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3, 2.25.0 and 2.25.1, Coder can be compromised through insecure session handling in prebuilt workspaces. Coder automatically generates a session token for a user when a workspace...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration via insecure session handling in prebuilt workspaces. An attacker can gain unauthorized access to other users' workspaces by reusing unexpired session tokens exposed through...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration via insecure session handling in prebuilt workspaces. An attacker can gain unauthorized access to other users' workspaces by reusing unexpired session tokens exposed through...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration via insecure session handling in prebuilt workspaces. An attacker can gain unauthorized access to other users' workspaces by reusing unexpired session tokens exposed through...