EUVD-2025-15893

Malicious code in bioql PyPI...

EUVD-2025-11930

Malicious code in bioql PyPI...

EUVD-2025-15906

Malicious code in bioql PyPI...

EUVD-2025-16381

Malicious code in bioql PyPI...

EUVD-2025-15817

Malicious code in bioql PyPI...

EUVD-2025-18411

Malicious code in bioql PyPI...

EUVD-2025-16477

Malicious code in bioql PyPI...

EUVD-2025-16494

Malicious code in bioql PyPI...

EUVD-2024-2951

Malicious code in bioql PyPI...

EUVD-2023-43055

Malicious code in bioql PyPI...

EUVD-2023-28553

Malicious code in bioql PyPI...

Langchaingo supports jinja2 and gonja for syntax parsing, allowing for arbitrary file read

Overview LangChainGo, the Go implementation of LangChain, a large language model LLM application building framework, has been discovered to contain an arbitrary file read vulnerability. The vulnerability, tracked as CVE-2025-9556, allows for arbitrary file read through the Gonja template engine...

Arbitrary code execution during build via line directives in cmd/go

...

CVE-2025-34159

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directives during project creation. By crafting...

MAL-2025-17881 Malicious code in cydashboard-directives (npm)

The package cydashboard-directives was found to contain malicious code...

Malicious code in cydashboard-directives (npm)

The package cydashboard-directives was found to contain malicious code...

Malicious code in vue-custom-directives (npm)

The package vue-custom-directives was found to contain malicious code...

MAL-2025-38668 Malicious code in vue-custom-directives (npm)

The package vue-custom-directives was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-32801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points...

Unauthorized Volume Mount

github.com/edgelesssys/contrast is vulnerable to Unauthorized Volume Mount. The vulnerability is due to unexpected interpretation of VOLUME directives due to containerd automatically creating mount points from VOLUME directives or config.volumes in OCI images even when Kubernetes has not explicit...