EUVD-2022-4868

Malicious code in bioql PyPI...

The vulnerability of the Hex package manager, related to insufficient validation of input data, allows for the execution of arbitrary code.

The vulnerability of the package manager Hex is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading packages from a malicious mirror site...

UBUNTU-CVE-2017-9269

In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content...