EUVD-2025-19555

Malicious code in bioql PyPI...

EUVD-2022-43948

Malicious code in bioql PyPI...

EUVD-2021-32558

Malicious code in bioql PyPI...

EUVD-2021-31330

Malicious code in bioql PyPI...

EUVD-2021-31328

Malicious code in bioql PyPI...

EUVD-2024-30459

Malicious code in bioql PyPI...

EUVD-2021-31322

Malicious code in bioql PyPI...

EUVD-2022-52599

Malicious code in bioql PyPI...

EUVD-2025-24933

Malicious code in bioql PyPI...

EUVD-2024-51947

Malicious code in bioql PyPI...

EUVD-2024-41878

Malicious code in bioql PyPI...

EUVD-2021-31336

Malicious code in bioql PyPI...

EUVD-2022-6209

Malicious code in bioql PyPI...

EUVD-2025-3075

Malicious code in bioql PyPI...

Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rich text field in web content articles. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting crafted input to this field. Details Cross-site scripting or XSS is a code...

Moderate: perl-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 For...

Cross-site Scripting (XSS)

Overview joomla/filter is a Joomla Filter Package Affected versions of this package are vulnerable to Cross-site Scripting XSS via the checkAttribute method. An attacker can execute arbitrary scripts in the context of the affected application by submitting specially crafted input that bypasses...

CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

CVE-2025-57873

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser...