EUVD-2024-17407

Malicious code in bioql PyPI...

EUVD-2022-0185

Malicious code in bioql PyPI...

EUVD-2025-30461

Malicious code in bioql PyPI...

EUVD-2021-6892

Malicious code in bioql PyPI...

EUVD-2022-7175

Malicious code in bioql PyPI...

EUVD-2024-3509

Malicious code in bioql PyPI...

EUVD-2024-0455

Malicious code in bioql PyPI...

EUVD-2023-23505

Malicious code in bioql PyPI...

EUVD-2024-1067

Malicious code in bioql PyPI...

EUVD-2025-24233

Malicious code in bioql PyPI...

EUVD-2025-2877

Malicious code in bioql PyPI...

EUVD-2023-48047

Malicious code in bioql PyPI...

EUVD-2023-41364

Malicious code in bioql PyPI...

EUVD-2023-2234

Malicious code in bioql PyPI...

EUVD-2022-7082

Malicious code in bioql PyPI...

EUVD-2024-49592

Malicious code in bioql PyPI...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

CVE-2025-59948 FreshRSS is vulnerable to XSS due to lack of CSP on HTML query page

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to ...

CVE-2025-59948

FreshRSS versions 1.26.3 and earlier are vulnerable to XSS due to unsanitized event handler attributes in feed content. The attack requires that the instance has API access authentication enabled and uses the /api/query.php endpoint; successful exploitation can lead to account takeover and, if th...