EUVD-2023-52366

Malicious code in bioql PyPI...

EUVD-2024-39573

Malicious code in bioql PyPI...

EUVD-2025-14755

Malicious code in bioql PyPI...

EUVD-2025-31583

Malicious code in bioql PyPI...

EUVD-2023-56908

Malicious code in bioql PyPI...

EUVD-2024-51930

Malicious code in bioql PyPI...

EUVD-2025-17570

Malicious code in bioql PyPI...

EUVD-2023-2564

Malicious code in bioql PyPI...

EUVD-2022-5619

Malicious code in bioql PyPI...

EUVD-2025-22369

Malicious code in bioql PyPI...

EUVD-2025-8857

Malicious code in bioql PyPI...

EUVD-2022-6347

Malicious code in bioql PyPI...

EUVD-2022-7411

Malicious code in bioql PyPI...

EUVD-2022-2835

Malicious code in bioql PyPI...

EUVD-2022-1226

Malicious code in bioql PyPI...

EUVD-2022-15567

Malicious code in bioql PyPI...

EUVD-2022-31063

Malicious code in bioql PyPI...

EUVD-2022-32593

Malicious code in bioql PyPI...

CVE-2025-59956

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for th...

CVE-2025-59956 AgentAPI exposed user chat history via a DNS rebinding attack

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for th...