EUVD-2022-45048

Malicious code in bioql PyPI...

EUVD-2023-43053

Malicious code in bioql PyPI...

EUVD-2022-34481

Malicious code in bioql PyPI...

EUVD-2022-55437

Malicious code in bioql PyPI...

EUVD-2022-42351

Malicious code in bioql PyPI...

EUVD-2024-45782

Malicious code in bioql PyPI...

EUVD-2023-30063

Malicious code in bioql PyPI...

EUVD-2022-6714

Malicious code in bioql PyPI...

EUVD-2022-27310

Malicious code in bioql PyPI...

EUVD-2023-51826

Malicious code in bioql PyPI...

EUVD-2024-25197

Malicious code in bioql PyPI...

EUVD-2025-23796

Malicious code in bioql PyPI...

EUVD-2022-2731

Malicious code in bioql PyPI...

EUVD-2023-2904

Malicious code in bioql PyPI...

EUVD-2025-20961

Malicious code in bioql PyPI...

EUVD-2021-29030

Malicious code in bioql PyPI...

RLSA-2025:7592 Important: yggdrasil security update

yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fixes: yggdrasil: Local privilege escalation in yggdrasi...

RLSA-2025:9418 Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

CVE-2025-53354 NiceGUI is vulnerable to Reflected XSS attack

NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting XSS when developers render unescaped user input into the DOM using ui.html. NiceGUI did not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.inpu...

NiceGUI has a Reflected XSS

Summary A Cross-Site Scripting XSS risk exists in NiceGUI when developers render unescaped user input into the DOM using ui.html. Before version 3.0, NiceGUI does not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input with ui.html without...