EUVD-2025-27229

Malicious code in bioql PyPI...

EUVD-2025-17643

Malicious code in bioql PyPI...

EUVD-2025-21750

Malicious code in bioql PyPI...

EUVD-2025-10400

Malicious code in bioql PyPI...

EUVD-2022-7611

Malicious code in bioql PyPI...

EUVD-2024-27857

Malicious code in bioql PyPI...

EUVD-2022-35899

Malicious code in bioql PyPI...

EUVD-2025-17099

Malicious code in bioql PyPI...

EUVD-2022-7478

Malicious code in bioql PyPI...

EUVD-2022-49458

Malicious code in bioql PyPI...

EUVD-2025-6913

Malicious code in bioql PyPI...

EUVD-2023-36917

Malicious code in bioql PyPI...

EUVD-2022-41820

Malicious code in bioql PyPI...

EUVD-2022-5823

Malicious code in bioql PyPI...

EUVD-2023-38471

Malicious code in bioql PyPI...

EUVD-2025-17101

Malicious code in bioql PyPI...

Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import

Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...

GHSA-HJFH-5JMM-XR24 laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import

Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...

laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import

Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...

CVE-2025-58769 auth0-PHP: Improper File Type Handling in Bulk User Import

auth0-PHP is an SDK for Auth0 Authentication and Management APIs. In versions 3.3.0 through 8.16.0, the Bulk User Import endpoint in applications built with the SDK does not validate the file-path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths o...