EUVD-2023-58773

Malicious code in bioql PyPI...

EUVD-2022-46028

Malicious code in bioql PyPI...

EUVD-2024-17358

Malicious code in bioql PyPI...

EUVD-2023-26626

Malicious code in bioql PyPI...

EUVD-2025-24941

Malicious code in bioql PyPI...

EUVD-2022-30644

Malicious code in bioql PyPI...

EUVD-2025-27793

Malicious code in bioql PyPI...

EUVD-2023-47014

Malicious code in bioql PyPI...

EUVD-2025-0059

Malicious code in bioql PyPI...

EUVD-2024-42143

Malicious code in bioql PyPI...

EUVD-2024-2188

Malicious code in bioql PyPI...

EUVD-2025-0175

Malicious code in bioql PyPI...

EUVD-2024-43129

Malicious code in bioql PyPI...

EUVD-2022-27304

Malicious code in bioql PyPI...

EUVD-2022-6418

Malicious code in bioql PyPI...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...

Improper Input Validation

Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Improper Input Validation via the HTML entity decoding logic in the client-side PDF export pipeline. An attacker can explo...

Open Redirect

Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Open Redirect via the nextpage query parameter in the post-authentication redirection flow. An attacker can exploit this...

Insertion of Sensitive Information into Log File

Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging of sensitive configuration data by the startresearch...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...