EUVD-2025-15817

Malicious code in bioql PyPI...

EUVD-2025-16402

Malicious code in bioql PyPI...

EUVD-2025-25911

Malicious code in bioql PyPI...

EUVD-2023-28553

Malicious code in bioql PyPI...

EUVD-2025-15252

Malicious code in bioql PyPI...

EUVD-2025-11930

Malicious code in bioql PyPI...

EUVD-2025-16494

Malicious code in bioql PyPI...

EUVD-2025-13619

Malicious code in bioql PyPI...

EUVD-2025-15893

Malicious code in bioql PyPI...

EUVD-2025-16513

Malicious code in bioql PyPI...

Langchaingo supports jinja2 and gonja for syntax parsing, allowing for arbitrary file read

Overview LangChainGo, the Go implementation of LangChain, a large language model LLM application building framework, has been discovered to contain an arbitrary file read vulnerability. The vulnerability, tracked as CVE-2025-9556, allows for arbitrary file read through the Gonja template engine...

Arbitrary code execution during build via line directives in cmd/go

...

CVE-2025-34159

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directives during project creation. By crafting...

Malicious code in cydashboard-directives (npm)

The package cydashboard-directives was found to contain malicious code...

Malicious code in vue-custom-directives (npm)

The package vue-custom-directives was found to contain malicious code...

MAL-2025-38668 Malicious code in vue-custom-directives (npm)

The package vue-custom-directives was found to contain malicious code...

MAL-2025-17881 Malicious code in cydashboard-directives (npm)

The package cydashboard-directives was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-32801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points...

Unauthorized Volume Mount

github.com/edgelesssys/contrast is vulnerable to Unauthorized Volume Mount. The vulnerability is due to unexpected interpretation of VOLUME directives due to containerd automatically creating mount points from VOLUME directives or config.volumes in OCI images even when Kubernetes has not explicit...

Security update for python39

This update for python39 fixes the following issues: python39 was updated from version 3.9.21 to version 3.9.23: Security issues fixed: CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS bsc1243273 CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517:...