Vulners
Lucene search
3 matches found
EUVD-2025-27629
Malicious code in bioql PyPI...
4.7CVSS6.3AI score0.00068EPSS
Exploits0References7
CVE-2025-9910
Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting XSS via HtmlFormatter::nodeBegin. An attacker can inject malicious scripts into HTML payloads that may lead to code execution if untrusted payloads were used as source for the diff, and the result renderer...
4.7CVSS6.9AI score0.00068EPSS
Exploits0References1
CVE-2025-9910
Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting XSS via HtmlFormatter::nodeBegin. An attacker can inject malicious scripts into HTML payloads that may lead to code execution if untrusted payloads were used as source for the diff, and the result renderer...
4.7CVSS0.00068EPSS
Exploits0References6
20