EUVD-2025-16292

Malicious code in bioql PyPI...

EUVD-2023-42900

Malicious code in bioql PyPI...

EUVD-2022-45011

Malicious code in bioql PyPI...

EUVD-2022-6634

Malicious code in bioql PyPI...

EUVD-2022-1593

Malicious code in bioql PyPI...

EUVD-2024-19631

Malicious code in bioql PyPI...

EUVD-2025-8629

Malicious code in bioql PyPI...

EUVD-2021-9210

Malicious code in bioql PyPI...

EUVD-2024-44043

Malicious code in bioql PyPI...

EUVD-2025-29458

Malicious code in bioql PyPI...

EUVD-2025-29119

Malicious code in bioql PyPI...

EUVD-2024-38159

Malicious code in bioql PyPI...

EUVD-2024-1176

Malicious code in bioql PyPI...

EUVD-2023-2184

Malicious code in bioql PyPI...

text-generation-inference: Unbounded external image fetch in validation leads to resource-exhaustion DoS

Description Text Generation Inference Router DoS via pre-validation image fetch in VLM mode. Affected: Router workspace version 3.3.6 the latest repo, when deployed with a vision/VLM model e.g., Idefics/Mllama/Idefics2/Idefics3/Gemma3/Llama4/Paligemma/LlavaNext/Qwen2VL/Qwen25VL. Pure text LLMs do...

CVE-2025-61589 Cursor: Potential Information Leakage via Mermaid Diagram

Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid a to render diagrams allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server throug...

CVE-2025-61589: Exposure of Sensitive Information to an Unauthorized Actor

Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid a to render diagrams allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server throug...

SUSE-SU-2025:03445-1 Security update for snpguest

This update for snpguest fixes the following issues: - CVE-2024-12224: idna: acceptance of Punycode labels that do not produce any non-ASCII output may lead to incorrect hostname comparisons and incorrect URL parsing bsc1243869. - CVE-2025-3416: openssl: use-after-free in Md::fetch and...

PT-2025-39896

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 Vasion Print formerly PrinterLogic Application versions prior to 25.1.1413 Description A protection mechanism failure exists in the file get contents function...

CVE-2025-59936 get-jwks poisoned JWKS cache allows post-fetch issuer validation bypass

get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache poisoning in the JWKS key-fetching mechanism. When the iss issuer claim is validated only after keys are retrieved from the cache, it is possible for cached keys from an...