EUVD-2023-54035

Malicious code in bioql PyPI...

EUVD-2024-1176

Malicious code in bioql PyPI...

EUVD-2025-30424

Malicious code in bioql PyPI...

EUVD-2023-42900

Malicious code in bioql PyPI...

EUVD-2022-6634

Malicious code in bioql PyPI...

EUVD-2025-25046

Malicious code in bioql PyPI...

EUVD-2025-27617

Malicious code in bioql PyPI...

EUVD-2025-29762

Malicious code in bioql PyPI...

EUVD-2025-16292

Malicious code in bioql PyPI...

EUVD-2024-34170

Malicious code in bioql PyPI...

EUVD-2022-0683

Malicious code in bioql PyPI...

EUVD-2023-47237

Malicious code in bioql PyPI...

EUVD-2024-29199

Malicious code in bioql PyPI...

EUVD-2025-29458

Malicious code in bioql PyPI...

EUVD-2022-24482

Malicious code in bioql PyPI...

text-generation-inference: Unbounded external image fetch in validation leads to resource-exhaustion DoS

Description Text Generation Inference Router DoS via pre-validation image fetch in VLM mode. Affected: Router workspace version 3.3.6 the latest repo, when deployed with a vision/VLM model e.g., Idefics/Mllama/Idefics2/Idefics3/Gemma3/Llama4/Paligemma/LlavaNext/Qwen2VL/Qwen25VL. Pure text LLMs do...

CVE-2025-61589 Cursor: Potential Information Leakage via Mermaid Diagram

Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid a to render diagrams allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server throug...

SUSE-SU-2025:03445-1 Security update for snpguest

This update for snpguest fixes the following issues: - CVE-2024-12224: idna: acceptance of Punycode labels that do not produce any non-ASCII output may lead to incorrect hostname comparisons and incorrect URL parsing bsc1243869. - CVE-2025-3416: openssl: use-after-free in Md::fetch and...

PT-2025-39896

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 Vasion Print formerly PrinterLogic Application versions prior to 25.1.1413 Description A protection mechanism failure exists in the file get contents function...

CVE-2025-59936 get-jwks poisoned JWKS cache allows post-fetch issuer validation bypass

get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache poisoning in the JWKS key-fetching mechanism. When the iss issuer claim is validated only after keys are retrieved from the cache, it is possible for cached keys from an...