EUVD-2011-1250

Malware in sbrugna...

EUVD-2011-1245

Malware in sbrugna...

EUVD-2011-1249

Malware in sbrugna...

EUVD-2011-0690

Malware in sbrugna...

EUVD-2011-0685

Malware in sbrugna...

EUVD-2005-0551

Malware in sbrugna...

EUVD-2011-1246

Malware in sbrugna...

EUVD-2011-1248

Malware in sbrugna...

EUVD-2011-0693

Malware in sbrugna...

EUVD-2011-0683

Malware in sbrugna...

EUVD-2017-16455

Malware in sbrugna...

EUVD-2025-16916

Malicious code in bioql PyPI...

EUVD-2023-43646

Malicious code in bioql PyPI...

CVE-2025-48881

Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If...

CVE-2025-48881

Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If...

CVE-2025-48881

CVE-2025-48881 pertains to the valtimo-backend-libraries component. Vulnerable versions (11.0.0.RELEASE–11.3.3.RELEASE and 12.0.0.RELEASE–12.12.0.RELEASE) allow unauthorised users to list, view, edit, create or delete objects for which an object-management configuration exists; exposure of object...

CVE-2025-48881 Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users

Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper access control mechanisms. A user can list, view, edit, create, or delete access and modify objects if at least one object-type is configured via object-management. Workaround This vulnerability c...

GHSA-965R-9CG9-G42P Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users

Impact All objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If object-urls are exposed via other channels, the contents of these objects can be viewed independent of object-management configurations. Attack...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper access control mechanisms. A user can list, view, edit, create, or delete access and modify objects if at least one object-type is configured via object-management. Workaround This vulnerability c...