CVE-2025-65570

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OPNEXT opcode. When an “instanceof” expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather...

EUVD-2024-1335

Malicious code in bioql PyPI...

Non-idiomatic use of iterators leads to use after free

Code that attempts to use an item e.g., a row returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. Code that uses the item and then advances the iterator is unaffected. This problem has always existed. This is ...

PT-2024-21792 · Unknown · Cassandra-Rs

Name of the Vulnerable Software and Affected Versions: cassandra-rs versions prior to 3.0.0 Description: The issue is related to a use-after-free bug in the cassandra-rs driver for Rust. Code that attempts to use an item returned by an iterator after the iterator has advanced to the next item wil...