EUVD-2021-30370

Malicious code in bioql PyPI...

EUVD-2022-1466

Malicious code in bioql PyPI...

EUVD-2024-52849

Malicious code in bioql PyPI...

EUVD-2025-9318

Malicious code in bioql PyPI...

EUVD-2022-5496

Malicious code in bioql PyPI...

EUVD-2025-25272

Malicious code in bioql PyPI...

EUVD-2022-7164

Malicious code in bioql PyPI...

EUVD-2022-7429

Malicious code in bioql PyPI...

EUVD-2022-27900

Malicious code in bioql PyPI...

EUVD-2022-15956

Malicious code in bioql PyPI...

EUVD-2022-2541

Malicious code in bioql PyPI...

EUVD-2022-5267

Malicious code in bioql PyPI...

EUVD-2023-2528

Malicious code in bioql PyPI...

CVE-2025-59163 vet MCP Server SSE Transport DNS Rebinding Vulnerability

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

DNS Rebinding

Overview Affected versions of this package are vulnerable to DNS Rebinding due to insufficient validation of the Host and Origin headers. An attacker can gain unauthorized access to sensitive data by luring a victim to a malicious website, enabling the attacker to read information from the report...

SafeDep 安全漏洞

SafeDep is an open source package from SafeDep that prevents malicious open source. A security vulnerability exists in SafeDep version 1.12.4 and earlier, which stems from a lack of HTTP Host and Origin header validation and could lead to a DNS rebinding attack...

The vulnerability in the `include/linux/kvm_host.h` component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the include/linux/kvmhost.h component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CVE-2025-59426 lobe-chat has an Open Redirect

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...

GHSA-XPH5-278P-26QX lobe-chat has an Open Redirect

Description --- Vulnerability Overview The project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a reverse proxy forwards client-supplied X-Forwarded-...

lobe-chat has an Open Redirect

Description --- Vulnerability Overview The project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a reverse proxy forwards client-supplied X-Forwarded-...