EUVD-2024-47336

Malicious code in bioql PyPI...

EUVD-2023-32026

Malicious code in bioql PyPI...

EUVD-2023-32027

Malicious code in bioql PyPI...

EUVD-2023-31293

Malicious code in bioql PyPI...

EUVD-2025-17371

Malicious code in bioql PyPI...

EUVD-2024-47867

Malicious code in bioql PyPI...

EUVD-2024-48211

Malicious code in bioql PyPI...

EUVD-2024-27350

Malicious code in bioql PyPI...

EUVD-2023-54190

Malicious code in bioql PyPI...

EUVD-2023-31291

Malicious code in bioql PyPI...

EUVD-2023-31290

Malicious code in bioql PyPI...

EUVD-2024-27415

Malicious code in bioql PyPI...

EUVD-2024-3571

Malicious code in bioql PyPI...

EUVD-2025-16332

Malicious code in bioql PyPI...

EUVD-2025-1809

Malicious code in bioql PyPI...

EUVD-2019-15026

Malicious code in bioql PyPI...

curl: AWS SigV4 Signature Disclosure via Verbose Logging in libcurl

Summary When libcurl is built with AWS SigV4 support, enabling verbose logging CURLOPTVERBOSE or --verbose causes the library to print both the string-to-sign and the final HMAC signature into logs. Because signatures remain valid for several minutes and are derived directly from AWS credentials,...

curl: Race condition on global `gss_context` during SOCKS5 GSS-API negotiation in libcurl

Summary: Concurrent SOCKS5 GSS-API authentications share a file-scope global gsscontext without synchronization, causing data races and undefined behavior. - Global context defined at: 52:54:curl/lib/socksgssapi.c static gssctxidt gsscontext = GSSCNOCONTEXT; - Passed by address into the GSS init...

CVE-2025-34199: Improper Certificate Validation

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 VA and SaaS deployments contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communications to printers and internal...

Security Bulletin: Publicly disclosed libcurl vulnerabilities affects IBM Safer Payments (CVE-2024-9681)

Summary Libcurl is used by IBM Safer Payments as part of the AVRO support for Kafka. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2024-9681 DESCRIPTION: When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making ...