EUVD-2025-24269

Malicious code in bioql PyPI...

CVE-2025-55011: Improper Limitation of a Pathname to a Restricted Directory

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, the createTaskFile method in the API does not validate whether the taskid parameter is a valid task id, nor does it check for path traversal. As a result, a malicious actor could write a file...