EUVD-2025-0076

Malicious code in bioql PyPI...

EUVD-2025-9035

Malicious code in bioql PyPI...

EUVD-2024-51454

Malicious code in bioql PyPI...

EUVD-2025-19189

Malicious code in bioql PyPI...

EUVD-2025-9038

Malicious code in bioql PyPI...

EUVD-2024-51487

Malicious code in bioql PyPI...

CVE-2025-48921

Cross-Site Request Forgery CSRF vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13...

CVE-2025-48921 Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079

Cross-Site Request Forgery CSRF vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13...

CVE-2025-48921

A Cross-Site Request Forgery (CSRF) vulnerability exists in Drupal Open Social , a social networking platform. The flaw stems from a default module that fails to sufficiently protect certain routes from CSRF attacks, specifically those involving event enrollments . This allows an attacker to tric...

Drupal Open Social security vulnerabilities

Drupal Open Social is a Drupal-based social networking platform solution from the Drupal community designed to provide a complete social networking capability for businesses, organizations or communities. A security vulnerability exists in Drupal Open Social versions prior to 12.3.14 and versions...

CVE-2025-31686

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...

CVE-2025-31685

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...

Drupal Open Social Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing. This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...

Drupal Open Social Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing. This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...

GHSA-M9W8-WXVP-C9GV Drupal Open Social Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing. This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...

GHSA-GF72-H4CP-WCM4 Drupal Open Social Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing. This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...

CVE-2025-31685

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...

CVE-2025-31686

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...

CVE-2025-31686

The Drupal Open Social distribution is vulnerable to a Missing Authorization vulnerability, which enables Forceful Browsing . The root cause is insufficient access control checks , allowing unauthorized users to access restricted resources, specifically enabling them to view invites for other spe...

CVE-2025-31685

The Drupal Open Social platform (specifically the goalgorilla/open_social package) is vulnerable to a Missing Authorization flaw allowing Forceful Browsing . The root cause is a site administration configuration that fails to properly check access permissions when attempting to translate the plat...