3700 matches found
EUVD-2021-28477
Malicious code in bioql PyPI...
EUVD-2022-0156
Malicious code in bioql PyPI...
EUVD-2022-2579
Malicious code in bioql PyPI...
EUVD-2023-38158
Malicious code in bioql PyPI...
EUVD-2025-19113
Malicious code in bioql PyPI...
EUVD-2022-38147
Malicious code in bioql PyPI...
EUVD-2025-29270
Malicious code in bioql PyPI...
EUVD-2025-11880
Malicious code in bioql PyPI...
EUVD-2024-50505
Malicious code in bioql PyPI...
EUVD-2022-39460
Malicious code in bioql PyPI...
EUVD-2024-33766
Malicious code in bioql PyPI...
EUVD-2024-30440
Malicious code in bioql PyPI...
EUVD-2023-2224
Malicious code in bioql PyPI...
EUVD-2024-0323
Malicious code in bioql PyPI...
EUVD-2024-25156
Malicious code in bioql PyPI...
EUVD-2024-1316
Malicious code in bioql PyPI...
RLSA-2025:9317 Moderate: delve security update
Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out ...
netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...
CVE-2025-59822 Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls...
HTTP Request Smuggling
Overview Affected versions of this package are vulnerable to HTTP Request Smuggling due to improper parsing of the HTTP trailer section in the parse function. An attacker can bypass security controls, launch targeted attacks against users, or poison web caches by crafting specially formed HTTP...