EUVD-2024-54722

Malicious code in bioql PyPI...

EUVD-2022-27892

Malicious code in bioql PyPI...

EUVD-2022-27901

Malicious code in bioql PyPI...

EUVD-2023-44382

Malicious code in bioql PyPI...

EUVD-2025-29845

Malicious code in bioql PyPI...

EUVD-2025-18276

Malicious code in bioql PyPI...

EUVD-2025-25299

Malicious code in bioql PyPI...

EUVD-2022-24855

Malicious code in bioql PyPI...

EUVD-2023-36939

Malicious code in bioql PyPI...

EUVD-2023-51105

Malicious code in bioql PyPI...

EUVD-2022-6703

Malicious code in bioql PyPI...

EUVD-2025-7773

Malicious code in bioql PyPI...

EUVD-2021-28279

Malicious code in bioql PyPI...

EUVD-2022-24914

Malicious code in bioql PyPI...

SUSE CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the export process in the images API endpoint. An attacker can determine the existence of projects by analyzing differences in HTTP status codes returned when querying with crafted fingerprints, such as using...

Canonical LXD Project Existence Determination Through Error Handling in Image Get Function

Impact The LXD /1.0/images endpoint is implemented as an AllowUntrusted API that requires no authentication, making it accessible to users without accounts. This API allows determining project existence through differences in HTTP status codes when accessed with the project parameter...

Family group chats: Your (very last) line of cyber defense

Welcome to this week's edition of the Threat Source newsletter, and happy Cybersecurity Awareness Month. Like everyone under the age of 35 who has at least one father, my dad sends me advice on online safety at least once a week. Does he work in information security? No. He's a recently retired...

CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...