EUVD-2025-9060

Malicious code in bioql PyPI...

CVE-2025-30672

Mite for Perl before 0.013000 generates code with the current working directory '.' added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

CVE-2025-30672 Mite for Perl generates code with an untrusted search path vulnerability

Mite for Perl before 0.013000 generates code with the current working directory '.' added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

CVE-2025-30672 Mite for Perl generates code with an untrusted search path vulnerability

Mite for Perl before 0.013000 generates code with the current working directory '.' added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

CVE-2025-30672

Mite for Perl before version 0.013000 is vulnerable to an uncontrolled search path issue (CWE-427). The software generates code that includes the current working directory ('.') in the @INC path , a behavior similar to CVE-2016-1238. If an attacker can place a malicious file in the current workin...

PT-2025-14018 · Mite · Mite

Name of the Vulnerable Software and Affected Versions: Mite for Perl versions prior to 0.013000 Description: The issue allows for code injection via @INC path manipulation. If an attacker can place a malicious file in the current working directory, it may be loaded instead of the intended file,...