3 matches found
EUVD-2025-27629
Malicious code in bioql PyPI...
4.7CVSS6.3AI score0.00282EPSS
SaveExploits0References7
CVE-2025-9910
Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting XSS via HtmlFormatter::nodeBegin. An attacker can inject malicious scripts into HTML payloads that may lead to code execution if untrusted payloads were used as source for the diff, and the result renderer...
4.7CVSS6.9AI score0.00282EPSS
SaveExploits0References1
CVE-2025-9910
Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting XSS via HtmlFormatter::nodeBegin. An attacker can inject malicious scripts into HTML payloads that may lead to code execution if untrusted payloads were used as source for the diff, and the result renderer...
4.7CVSS0.00282EPSS
SaveExploits0References6
20