EUVD-2024-22113

Malicious code in bioql PyPI...

EUVD-2024-0652

Malicious code in bioql PyPI...

EUVD-2025-26637

Malicious code in bioql PyPI...

EUVD-2023-41170

Malicious code in bioql PyPI...

EUVD-2024-23242

Malicious code in bioql PyPI...

EUVD-2025-28926

Malicious code in bioql PyPI...

EUVD-2025-24030

Malicious code in bioql PyPI...

EUVD-2024-1531

Malicious code in bioql PyPI...

EUVD-2025-32122

Malicious code in bioql PyPI...

EUVD-2024-0055

Malicious code in bioql PyPI...

EUVD-2022-55233

Malicious code in bioql PyPI...

EUVD-2023-43648

Malicious code in bioql PyPI...

EUVD-2022-7006

Malicious code in bioql PyPI...

EUVD-2023-37258

Malicious code in bioql PyPI...

EUVD-2023-33065

Malicious code in bioql PyPI...

EUVD-2024-49631

Malicious code in bioql PyPI...

RLSA-2025:16154 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...

CVE-2025-59933

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

Deserialization of Untrusted Data

Overview datachain is a Wrangle unstructured AI data at scale Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loader.py module. An attacker can execute arbitrary code by setting crafted environment variables that are deserialized by the application...

GHSA-6PX8-MR29-CJ4R DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...