EUVD-2023-1043

Malicious code in bioql PyPI...

EUVD-2024-39573

Malicious code in bioql PyPI...

EUVD-2022-28143

Malicious code in bioql PyPI...

EUVD-2022-5619

Malicious code in bioql PyPI...

EUVD-2023-2564

Malicious code in bioql PyPI...

EUVD-2025-17570

Malicious code in bioql PyPI...

EUVD-2022-6347

Malicious code in bioql PyPI...

EUVD-2025-8857

Malicious code in bioql PyPI...

EUVD-2022-1226

Malicious code in bioql PyPI...

EUVD-2022-2835

Malicious code in bioql PyPI...

EUVD-2022-32593

Malicious code in bioql PyPI...

EUVD-2022-31063

Malicious code in bioql PyPI...

EUVD-2022-15567

Malicious code in bioql PyPI...

EUVD-2025-22369

Malicious code in bioql PyPI...

EUVD-2022-7411

Malicious code in bioql PyPI...

CVE-2025-59956

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for th...

CVE-2025-59956 AgentAPI exposed user chat history via a DNS rebinding attack

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for th...

CVE-2025-59956 AgentAPI exposed user chat history via a DNS rebinding attack

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for th...

CVE-2025-59163

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

CVE-2025-59163 vet MCP Server SSE Transport DNS Rebinding Vulnerability

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...