EUVD-2025-29845

Malicious code in bioql PyPI...

EUVD-2023-40746

Malicious code in bioql PyPI...

EUVD-2022-48057

Malicious code in bioql PyPI...

EUVD-2022-35120

Malicious code in bioql PyPI...

EUVD-2025-10448

Malicious code in bioql PyPI...

EUVD-2025-7773

Malicious code in bioql PyPI...

EUVD-2021-31766

Malicious code in bioql PyPI...

EUVD-2025-18276

Malicious code in bioql PyPI...

EUVD-2022-45966

Malicious code in bioql PyPI...

EUVD-2024-26943

Malicious code in bioql PyPI...

EUVD-2024-19958

Malicious code in bioql PyPI...

EUVD-2022-48076

Malicious code in bioql PyPI...

EUVD-2025-15586

Malicious code in bioql PyPI...

EUVD-2022-24855

Malicious code in bioql PyPI...

EUVD-2024-32437

Malicious code in bioql PyPI...

SUSE CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the export process in the images API endpoint. An attacker can determine the existence of projects by analyzing differences in HTTP status codes returned when querying with crafted fingerprints, such as using...

Canonical LXD Project Existence Determination Through Error Handling in Image Get Function

Impact The LXD /1.0/images endpoint is implemented as an AllowUntrusted API that requires no authentication, making it accessible to users without accounts. This API allows determining project existence through differences in HTTP status codes when accessed with the project parameter...

Family group chats: Your (very last) line of cyber defense

Welcome to this week's edition of the Threat Source newsletter, and happy Cybersecurity Awareness Month. Like everyone under the age of 35 who has at least one father, my dad sends me advice on online safety at least once a week. Does he work in information security? No. He's a recently retired...

CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...