Authentication Bypass

Apache Kylin is vulnerable to Authentication Bypass. The vulnerability is due to improper validation of alternate endpoints that bypass normal authentication checks, allowing an attacker to gain unauthorized access to protected functionality...

Apache Kylin Authentication Bypass Vulnerability

Apache Kylin is an open source distributed analytics engine designed to provide SQL interfaces as well as support for multidimensional analytics for Hadoop and Alluxio for very large datasets. An authentication bypass vulnerability exists in the Apache Kylin /kylin/api/user/updateuser interface,...

CVE-2025-61733

Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the issue...

CVE-2025-61735

Server-Side Request Forgery SSRF vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected. Users are recommended to upgrade to version 5.0.3, which fixes the issue...

CVE-2025-61734

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the...

EUVD-2025-32088

Malicious code in bioql PyPI...

EUVD-2025-32089

Malicious code in bioql PyPI...

EUVD-2025-32090

Malicious code in bioql PyPI...

EUVD-2025-8449

Malicious code in bioql PyPI...

EUVD-2022-0544

Malicious code in bioql PyPI...

EUVD-2024-0235

Malicious code in bioql PyPI...

EUVD-2025-8498

Malicious code in bioql PyPI...

EUVD-2022-0646

Malicious code in bioql PyPI...

EUVD-2022-0453

Malicious code in bioql PyPI...

EUVD-2022-0672

Malicious code in bioql PyPI...

EUVD-2023-23544

Malicious code in bioql PyPI...

EUVD-2022-0730

Malicious code in bioql PyPI...

Apache Kylin 2.3.x < 3.1.0 Command Injection

According to its banner, the version of Apache Kylin running on the remote host is 2.3.x 3.1.0. It is, therefore, affected by a Command Injection vulnerability through the REST API. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reporte...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...