EUVD-2025-179211

Malicious code in easy-kernel-deserialize-public-await npm...

pkcs11-helper -- deserialize buffer overflow

Alon Bar-Lev reports: util: fix deserialize buffer overflow. thanks to Aarnav Bos...

EUVD-2022-0619

Malicious code in bioql PyPI...

EUVD-2025-31172

Malicious code in bioql PyPI...

Incorrect Authorization

Overview authlib is a library in building OAuth and OpenID Connect servers. Affected versions of this package are vulnerable to Incorrect Authorization via the deserializecompact function. An attacker can bypass intended authorization policies by crafting a signed token with unknown critical head...

PT-2025-38752

Name of the Vulnerable Software and Affected Versions Authlib versions prior to 1.6.4 Description Authlib’s JWS verification improperly handles tokens declaring unknown critical header parameters crit, violating RFC 7515 specifications. An attacker can create a signed token with a critical header...

EUVD-2025-30225

A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection...

Malicious code in virtualize-long-deserialize-permission-user (npm)

The package virtualize-long-deserialize-permission-user was found to contain malicious code...

Malicious code in async-deserialize-xi-assert-shell (npm)

The package async-deserialize-xi-assert-shell was found to contain malicious code...

Malicious code in deserialize-promise-tree-gamma-monitor (npm)

The package deserialize-promise-tree-gamma-monitor was found to contain malicious code...

Malicious code in deserialize-object-bash-monitor-short (npm)

The package deserialize-object-bash-monitor-short was found to contain malicious code...

Malicious code in benchmark-deserialize-mu-epsilon-shell (npm)

The package benchmark-deserialize-mu-epsilon-shell was found to contain malicious code...

Malicious code in deserialize-slow-warn-quick-export (npm)

The package deserialize-slow-warn-quick-export was found to contain malicious code...

Malicious code in reject-sun-deserialize-runtime-emulate (npm)

The package reject-sun-deserialize-runtime-emulate was found to contain malicious code...

MAL-2025-34158 Malicious code in sudo-resolve-deserialize-file-cloud (npm)

The package sudo-resolve-deserialize-file-cloud was found to contain malicious code...

MAL-2025-15595 Malicious code in benchmark-deserialize-mu-epsilon-shell (npm)

The package benchmark-deserialize-mu-epsilon-shell was found to contain malicious code...

MAL-2025-18306 Malicious code in deserialize-promise-tree-gamma-monitor (npm)

The package deserialize-promise-tree-gamma-monitor was found to contain malicious code...

MAL-2025-25468 Malicious code in load-book-encrypt-deserialize-permission (npm)

The package load-book-encrypt-deserialize-permission was found to contain malicious code...

Malicious code in load-book-encrypt-deserialize-permission (npm)

The package load-book-encrypt-deserialize-permission was found to contain malicious code...

Malicious code in sudo-resolve-deserialize-file-cloud (npm)

The package sudo-resolve-deserialize-file-cloud was found to contain malicious code...