EUVD-2025-17371

Malicious code in bioql PyPI...

EUVD-2024-3571

Malicious code in bioql PyPI...

EUVD-2023-31291

Malicious code in bioql PyPI...

EUVD-2023-32027

Malicious code in bioql PyPI...

EUVD-2023-31290

Malicious code in bioql PyPI...

EUVD-2024-48211

Malicious code in bioql PyPI...

EUVD-2024-27350

Malicious code in bioql PyPI...

EUVD-2023-54190

Malicious code in bioql PyPI...

EUVD-2024-47336

Malicious code in bioql PyPI...

EUVD-2025-1809

Malicious code in bioql PyPI...

EUVD-2023-31293

Malicious code in bioql PyPI...

EUVD-2024-47867

Malicious code in bioql PyPI...

EUVD-2019-15026

Malicious code in bioql PyPI...

EUVD-2023-32026

Malicious code in bioql PyPI...

EUVD-2025-16332

Malicious code in bioql PyPI...

EUVD-2024-27415

Malicious code in bioql PyPI...

EUVD-2025-1837

Malicious code in bioql PyPI...

curl: AWS SigV4 Signature Disclosure via Verbose Logging in libcurl

Summary When libcurl is built with AWS SigV4 support, enabling verbose logging CURLOPTVERBOSE or --verbose causes the library to print both the string-to-sign and the final HMAC signature into logs. Because signatures remain valid for several minutes and are derived directly from AWS credentials,...

curl: Race condition on global `gss_context` during SOCKS5 GSS-API negotiation in libcurl

Summary: Concurrent SOCKS5 GSS-API authentications share a file-scope global gsscontext without synchronization, causing data races and undefined behavior. - Global context defined at: 52:54:curl/lib/socksgssapi.c static gssctxidt gsscontext = GSSCNOCONTEXT; - Passed by address into the GSS init...

Security Bulletin: Publicly disclosed libcurl vulnerabilities affects IBM Safer Payments (CVE-2024-9681)

Summary Libcurl is used by IBM Safer Payments as part of the AVRO support for Kafka. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2024-9681 DESCRIPTION: When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making ...