EUVD-2023-1524

Malicious code in bioql PyPI...

EUVD-2024-2761

Malicious code in bioql PyPI...

EUVD-2025-22999

Malicious code in bioql PyPI...

EUVD-2025-18671

Malicious code in bioql PyPI...

EUVD-2024-54605

Malicious code in bioql PyPI...

EUVD-2025-4440

Malicious code in bioql PyPI...

EUVD-2025-15183

Malicious code in bioql PyPI...

EUVD-2022-3213

Malicious code in bioql PyPI...

EUVD-2023-46375

Malicious code in bioql PyPI...

EUVD-2024-0376

Malicious code in bioql PyPI...

EUVD-2022-6279

Malicious code in bioql PyPI...

EUVD-2023-37457

Malicious code in bioql PyPI...

EUVD-2024-2359

Malicious code in bioql PyPI...

AZL-68241 CVE-2025-46818 affecting package valkey for versions less than 8.0.6-1

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

CVE-2025-27231

The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change...

PT-2025-40512

Name of the Vulnerable Software and Affected Versions Versions prior to the fix where the 'Bind password' value is reset on 'Host' change. Description A Super Admin account can potentially leak the LDAP 'Bind password' value by changing the LDAP 'Host' to a rogue LDAP server. The 'Bind password'...

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

CVE-2025-11149

This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes null bytes. This allows attackers to access http://host/%00 and crash the server. Mitigation Mitigation for this issue is...

CVE-2025-59537

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate client...

CVE-2025-59538

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...