EUVD-2024-54315

Malicious code in bioql PyPI...

EUVD-2021-8878

Malicious code in bioql PyPI...

EUVD-2023-35788

Malicious code in bioql PyPI...

EUVD-2023-58210

Malicious code in bioql PyPI...

EUVD-2024-1250

Malicious code in bioql PyPI...

EUVD-2025-17715

Malicious code in bioql PyPI...

EUVD-2023-47675

Malicious code in bioql PyPI...

EUVD-2023-2995

Malicious code in bioql PyPI...

EUVD-2023-2265

Malicious code in bioql PyPI...

EUVD-2022-15438

Malicious code in bioql PyPI...

EUVD-2024-51756

Malicious code in bioql PyPI...

EUVD-2023-38306

Malicious code in bioql PyPI...

EUVD-2025-16687

Malicious code in bioql PyPI...

EUVD-2023-42163

Malicious code in bioql PyPI...

EUVD-2022-51275

Malicious code in bioql PyPI...

EUVD-2022-4447

Malicious code in bioql PyPI...

CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...

SUSE SLED15: libpython3_13-1_0 / python313 / python313-base / python313-curses / etc (SUSE-SU-2025:02767-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02767-1 advisory. - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249. -...

BIT-LIBPYTHON-2025-4517 Arbitrary writes via tarfile realpath overflow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter= parameter with a value of...

BIT-LIBPYTHON-2025-4435 Tarfile extracts filtered members when errorlevel=0

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped...