EUVD-2022-6087

Malicious code in bioql PyPI...

EUVD-2024-46333

Malicious code in bioql PyPI...

EUVD-2023-36820

Malicious code in bioql PyPI...

EUVD-2025-31257

Malicious code in bioql PyPI...

EUVD-2025-9103

Malicious code in bioql PyPI...

EUVD-2024-30315

Malicious code in bioql PyPI...

EUVD-2022-43323

Malicious code in bioql PyPI...

EUVD-2023-49325

Malicious code in bioql PyPI...

EUVD-2023-52773

Malicious code in bioql PyPI...

EUVD-2024-52051

Malicious code in bioql PyPI...

EUVD-2023-28468

Malicious code in bioql PyPI...

EUVD-2022-33199

Malicious code in bioql PyPI...

EUVD-2024-35457

Malicious code in bioql PyPI...

EUVD-2023-26814

Malicious code in bioql PyPI...

EUVD-2023-0351

Malicious code in bioql PyPI...

EUVD-2024-16804

Malicious code in bioql PyPI...

EUVD-2024-16580

Malicious code in bioql PyPI...

CRLF Injection

Overview aioftp is a ftp client/server for asyncio Affected versions of this package are vulnerable to CRLF Injection via the aioftp.Client.command method that lacks checks for CR/LF characters in command strings. An attacker can add the \r\n characters and inject additional headers in the FTP...

CVE-2025-59948

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to ...

CVE-2025-59948

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to ...