EUVD-2024-38932

Malicious code in bioql PyPI...

EUVD-2024-38933

Malicious code in bioql PyPI...

EUVD-2024-38934

Malicious code in bioql PyPI...

EUVD-2024-38935

Malicious code in bioql PyPI...

EUVD-2024-38936

Malicious code in bioql PyPI...

EUVD-2024-38937

Malicious code in bioql PyPI...

EUVD-2024-38938

Malicious code in bioql PyPI...

EUVD-2024-38939

Malicious code in bioql PyPI...

EUVD-2024-0824

Malicious code in bioql PyPI...

EUVD-2023-0081

Malicious code in bioql PyPI...

EUVD-2022-0027

Malicious code in bioql PyPI...

EUVD-2024-3529

Malicious code in bioql PyPI...

EUVD-2023-0083

Malicious code in bioql PyPI...

CVE-2025-50690

A Cross-Site Scripting XSS vulnerability exists in SpatialReference.org OSGeo/spatialreference.org versions prior to 2025-05-17 commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491. The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a...

Malicious code in geospatial-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74393d640797f18f4e110cfb20f3f2be681c867e2383cfa386f78a3fad2065f8 The OpenSSF Package Analysis project identified 'geospatial-example' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6874 Malicious code in geospatial-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74393d640797f18f4e110cfb20f3f2be681c867e2383cfa386f78a3fad2065f8 The OpenSSF Package Analysis project identified 'geospatial-example' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the process that applies field masking rules to fields of types ip, geopoint, geoshape, xypoint, and xyshape. An attacker can access sensitive information by issuing search queries that reconstruct the original...

CVE-2025-27505

GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API security and access the index page. The REST API security handles rest and its subpaths but not rest with an extension e.g., rest.html. The REST API index can...

CVE-2024-38524

GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispatcher.handleFrontPageHttpServletRequest, HttpServletResponse has no check to hide potentially sensitive information from users except for a hidden system property to hide the...

CVE-2025-27505

GeoServer contains a REST API index authorization bypass vulnerability (CVE-2025-27505). The REST security excludes paths with extensions (for example rest.html), allowing unauthenticated access to the REST API Index and potentially revealing installed extensions and API endpoints. Affected codep...