EUVD-2024-42696

Malicious code in bioql PyPI...

EUVD-2022-15364

Malicious code in bioql PyPI...

EUVD-2025-16259

Malicious code in bioql PyPI...

EUVD-2022-46072

Malicious code in bioql PyPI...

EUVD-2024-29336

Malicious code in bioql PyPI...

EUVD-2025-6762

Malicious code in bioql PyPI...

EUVD-2025-16217

Malicious code in bioql PyPI...

EUVD-2025-26637

Malicious code in bioql PyPI...

EUVD-2022-15633

Malicious code in bioql PyPI...

EUVD-2025-16258

Malicious code in bioql PyPI...

EUVD-2022-4709

Malicious code in bioql PyPI...

EUVD-2025-28906

Malicious code in bioql PyPI...

EUVD-2023-0022

Malicious code in bioql PyPI...

EUVD-2024-19626

Malicious code in bioql PyPI...

EUVD-2023-38484

Malicious code in bioql PyPI...

Insecure Deserialization

DeepDiff is vulnerable to insecure deserialization.The vulnerability is due to class pollution via the Delta class constructor which, when combined with a gadget in DeltaDiff, allows an attacker to modify deepdiff.serialization.SAFETOIMPORT and trigger insecure Pickle deserialization through Delt...

SUSE CVE-2022-50454

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in nouveaugemprimeimportsgtable nouveauboinit is backed by ttmboinit and ferries its return code back to the caller. On failures, ttm will call nouveaubodelttm and free the memory.Thus, when...

WordPress plugin CTL Behance Importer Lite 安全漏洞

WordPress CTL Behance Importer Lite is a plugin for importing work from the Behance platform to a WordPress website, mainly used to help creators quickly migrate their work and optimize their website content management. The WordPress CTL Behance Importer Lite plugin suffers from an SQL injection...

Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import

Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...

GHSA-7JP2-5H22-M432 Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import

Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...