EUVD-2025-23369

Malicious code in bioql PyPI...

CVE-2025-50460

The modelscope/ms-swift project (version 3.3.0 and later) is vulnerable to Remote Code Execution (RCE) via unsafe deserialization in the tests/run.py script. The flaw occurs when the application uses PyYAML (versions $\le$ 5.3.1) to process a user-supplied YAML configuration file via the --run_co...

CVE-2025-50460

A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load from the PyYAML library versions = 5.3.1. If an attacker can control the content of the YAML configuration file passed to the --runconfig parameter,...