EUVD-2025-8199

Malicious code in bioql PyPI...

EUVD-2022-25160

Malicious code in bioql PyPI...

EUVD-2022-0986

Malicious code in bioql PyPI...

EUVD-2022-7510

Malicious code in bioql PyPI...

EUVD-2024-0652

Malicious code in bioql PyPI...

EUVD-2024-53030

Malicious code in bioql PyPI...

EUVD-2025-30217

Malicious code in bioql PyPI...

EUVD-2022-55231

Malicious code in bioql PyPI...

EUVD-2022-55233

Malicious code in bioql PyPI...

EUVD-2025-28926

Malicious code in bioql PyPI...

EUVD-2025-24029

Malicious code in bioql PyPI...

EUVD-2025-24030

Malicious code in bioql PyPI...

EUVD-2025-26625

Malicious code in bioql PyPI...

EUVD-2025-28810

Malicious code in bioql PyPI...

EUVD-2022-32426

Malicious code in bioql PyPI...

EUVD-2022-43604

Malicious code in bioql PyPI...

RLSA-2025:16154 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...

CVE-2025-59933

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

Deserialization of Untrusted Data

Overview datachain is a Wrangle unstructured AI data at scale Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loader.py module. An attacker can execute arbitrary code by setting crafted environment variables that are deserialized by the application...

GHSA-6PX8-MR29-CJ4R DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...