EUVD-2024-0059

Malicious code in bioql PyPI...

EUVD-2022-5601

Malicious code in bioql PyPI...

EUVD-2024-53945

Malicious code in bioql PyPI...

EUVD-2023-44535

Malicious code in bioql PyPI...

EUVD-2022-1628

Malicious code in bioql PyPI...

EUVD-2025-0127

Malicious code in bioql PyPI...

EUVD-2023-0877

Malicious code in bioql PyPI...

EUVD-2025-17566

Malicious code in bioql PyPI...

EUVD-2024-2325

Malicious code in bioql PyPI...

EUVD-2024-16505

Malicious code in bioql PyPI...

EUVD-2022-0786

Malicious code in bioql PyPI...

EUVD-2022-2350

Malicious code in bioql PyPI...

EUVD-2022-3503

Malicious code in bioql PyPI...

EUVD-2025-7101

Malicious code in bioql PyPI...

EUVD-2022-0673

Malicious code in bioql PyPI...

EUVD-2024-2963

Malicious code in bioql PyPI...

Unmasking Puppeteers: Leveraging Biometric Leakage to Disarm Impersonation in AI-Based Videoconferencing

AI-based talking-head videoconferencing systems reduce bandwidth by sending a compact pose-expression latent and re-synthesizing RGB at the receiver, but this latent can be puppeteered, letting an attacker hijack a victim's likeness in real time. Because every frame is synthetic, deepfake and...

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

...

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...