EUVD-2023-27107

Malicious code in bioql PyPI...

Insufficient Type Distinction

Overview skops is an A set of tools to push scikit-learn based models to and pull from Hugging Face Hub Affected versions of this package are vulnerable to Insufficient Type Distinction via inconsistent validation in the OperatorFuncNode class in the io/audit.py file. An attacker can execute...

CVE-2023-23007

An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function node where members are added...