EUVD-2024-2769

Malicious code in bioql PyPI...

EUVD-2024-2730

Malicious code in bioql PyPI...

EUVD-2024-0833

Malicious code in bioql PyPI...

EUVD-2024-1938

Malicious code in bioql PyPI...

EUVD-2022-1872

Malicious code in bioql PyPI...

EUVD-2024-1618

Malicious code in bioql PyPI...

EUVD-2024-2368

Malicious code in bioql PyPI...

EUVD-2024-2287

Malicious code in bioql PyPI...

EUVD-2025-21409

Malicious code in bioql PyPI...

EUVD-2025-21408

Malicious code in bioql PyPI...

EUVD-2025-21407

Malicious code in bioql PyPI...

EUVD-2024-1709

Malicious code in bioql PyPI...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.2), @angular/build (>=20.2.0-next.3, <=21.0.0-next.2) +29 more potentially affected by CVE-2025-58752 via vite (>=7.1.0, <=7.1.4)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =2.14.0, =30.0.0, =16.0.1, =21.0.0-alpha.10, =21.0.0-alpha.10, =2.19.8, =2.19.8, =14.314.0, =9.6.3, =0.0.0-snapshot-0360a7c2f707db55df213993503b56c6a1d96d0e, =0.0.0-snapshot-0360a7c2f707db55df213993503b56c6a1d96d0e,...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @deconz-community/directus-extension-ddf-store (0.1.0) +5 more potentially affected by CVE-2025-55746 via @directus/api (>=14.1.0, <=28.0.1)

@directus/api NPM version =14.1.0, =1.6.3, =1.2.2, =10.8.0, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-55746 Source advisory: OSV:GHSA-MV33-9F6J-PFMC...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @deconz-community/directus-extension-ddf-store (0.1.0) +5 more potentially affected by CVE-2025-55746 via @directus/api (>=14.1.0, <=28.0.1)

@directus/api NPM version =14.1.0, =1.6.3, =1.2.2, =10.8.0, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-55746 Source advisory: GHSA-MV33-9F6J-PFMC...

directus (>=11.9.0, <=11.9.2) potentially affected by CVE-2025-55746 via @directus/api (>=28.0.0, <=28.0.2)

@directus/api NPM version =28.0.0, =11.9.0, =11.9.2 Source cves: CVE-2025-55746 Source advisory: SNYK:JS-DIRECTUSAPI-12079023...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @deconz-community/directus-extension-ddf-store (0.1.0) +5 more potentially affected by CVE-2025-55746 via @directus/api (>=14.1.0, <=28.0.1)

@directus/api NPM version =14.1.0, =1.6.3, =1.2.2, =10.8.0, =1.0.0, =2.0.0 - directus-extension-blog-year-filter 1.0.0 Source cves: CVE-2025-55746 Source advisory: MEND:CVE-2025-55746...

CVE-2025-53886

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows with the WebHook trigger all incoming request details are logged including security sensitive data like access and refresh tokens in...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @directus/api (>=20.0.0-rc.0, <=27.1.0) potentially affected by CVE-2025-53889 via directus (>=11.0.0-rc.1, <=11.8.0)

directus NPM version =11.0.0-rc.1, =1.6.3, =20.0.0-rc.0, =27.1.0 Source cves: CVE-2025-53889 Source advisory: GHSA-7CVF-PXGP-42FC...

@bicou/directus-extension-imagga (>=1.6.3, <=1.6.6), @directus/api (>=20.0.0-rc.0, <=27.1.0) potentially affected by CVE-2025-53887 via directus (>=11.0.0-rc.1, <=11.8.0)

directus NPM version =11.0.0-rc.1, =1.6.3, =20.0.0-rc.0, =27.1.0 Source cves: CVE-2025-53887 Source advisory: OSV:GHSA-RMJH-CF9Q-PV7Q...