EUVD-2023-27719

Malicious code in bioql PyPI...

EUVD-2024-52859

Malicious code in bioql PyPI...

EUVD-2023-36920

Malicious code in bioql PyPI...

EUVD-2022-41826

Malicious code in bioql PyPI...

EUVD-2023-27718

Malicious code in bioql PyPI...

EUVD-2022-29633

Malicious code in bioql PyPI...

EUVD-2023-41366

Malicious code in bioql PyPI...

EUVD-2022-29635

Malicious code in bioql PyPI...

EUVD-2025-5074

Malicious code in bioql PyPI...

EUVD-2025-14803

Malicious code in bioql PyPI...

EUVD-2025-10696

Malicious code in bioql PyPI...

EUVD-2022-41828

Malicious code in bioql PyPI...

EUVD-2022-29634

Malicious code in bioql PyPI...

EUVD-2022-41827

Malicious code in bioql PyPI...

EUVD-2025-17571

Malicious code in bioql PyPI...

EUVD-2022-46746

Malicious code in bioql PyPI...

EUVD-2022-41824

Malicious code in bioql PyPI...

Metabase 1.52.x < 1.52.2.5

The version of Metabase installed on the remote host is 1.52.x prior to 1.52.2.5. It is, therefore, affected by a information disclosure vulnerability. For new sandboxing configurations created in 1.52.0 till 1.52.2.4, sandboxed users are able to see field filter values from other sandboxed users...

Metabase < 0.29.3 XSS

The version of Metabase installed on the remote host is prior to 0.29.3. It is, therefore, affected by a Cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Note that Nessus has not tested for this issue but has instead...

Metabase < 0.44.5

The version of Metabase installed on the remote host is prior to 0.44.5. It is, therefore, affected by a The url parameter of the /api/geojson endpoint in Metabase versions 0.44.5 can be used to perform Server Side Request Forgery attacks. Previously implemented blacklists could be circumvented b...