EUVD-2024-30728

Malicious code in bioql PyPI...

EUVD-2025-7242

Malicious code in bioql PyPI...

EUVD-2024-20838

Malicious code in bioql PyPI...

EUVD-2021-30706

Malicious code in bioql PyPI...

EUVD-2024-20841

Malicious code in bioql PyPI...

EUVD-2024-34737

Malicious code in bioql PyPI...

EUVD-2022-33590

Malicious code in bioql PyPI...

EUVD-2022-33586

Malicious code in bioql PyPI...

EUVD-2022-28576

Malicious code in bioql PyPI...

EUVD-2023-39929

Malicious code in bioql PyPI...

EUVD-2024-41614

Malicious code in bioql PyPI...

EUVD-2024-41612

Malicious code in bioql PyPI...

EUVD-2024-51924

Malicious code in bioql PyPI...

EUVD-2024-20842

Malicious code in bioql PyPI...

EUVD-2023-31254

Malicious code in bioql PyPI...

SUSE CVE-2025-54588

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free UAF vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic...

CVE-2024-28249

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.13.13, 1.14.8, and 1.15.2, in Cilium clusters with IPsec enabled and traffic matching Layer 7 policies, IPsec-eligible traffic between a node's Envoy proxy and pods on other nodes is sen...

CVE-2021-32783

Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface, which Contour normally prevents from access outside the Envoy container. This can be used to shut down Envoy...

CVE-2021-32574

HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1...

BIT-ENVOY-2025-46821 Envoy vulnerable to bypass of RBAC uri_template permission

Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the character from a set of valid characters in the URI path. As a result URI path containing the character will not match a URI template...