EUVD-2025-18858

Malicious code in bioql PyPI...

CVE-2025-6494

A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833. It has been classified as problematic. This affects the function hashmapgetwithhash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow. An attack has to be...

CVE-2025-6490

CVE-2025-6490 concerns a heap-based buffer overflow in gumbo-parser/src/hashmap.c (function hashmap_set_with_hash) within sparklemotion nokogiri. Reported as a locally exploitable issue; exploitation details have been disclosed, but the real existence of the vulnerability is questioned in the des...