EUVD-2021-8692

Malicious code in bioql PyPI...

EUVD-2022-3908

Malicious code in bioql PyPI...

EUVD-2024-3540

Malicious code in bioql PyPI...

EUVD-2024-1541

Malicious code in bioql PyPI...

EUVD-2022-3858

Malicious code in bioql PyPI...

EUVD-2023-31331

Malicious code in bioql PyPI...

EUVD-2022-3554

Malicious code in bioql PyPI...

EUVD-2022-3307

Malicious code in bioql PyPI...

EUVD-2023-29705

Malicious code in bioql PyPI...

EUVD-2023-30262

Malicious code in bioql PyPI...

EUVD-2022-4873

Malicious code in bioql PyPI...

CVE-2025-57682

Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution via the "POST /api/file/s3/get-presigned-get-url-proxy" API...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gitsign, addon-resizer, git-lfs, sftpgo-plugin-pubsub, ctop, vault-k8s, newrelic-fluent-bit-output, shfmt, vexctl, kube-vip-cloud-provider, kserve-rest-proxy, nats, confluent-common-docker, bank-vaults, docker-credential-ecr-login, php-fpmexporter, octo-sts, hivemind...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, apm-server-fips, blobfuse2, vault-k8s, stakater-reloader, cluster-api, openbao-k8s-fips, gostatsd, kuberay-operator, karma-fips, karpenter-fips, nats, local-path-provisioner, bank-vaults, configmap-reload-fips,...

An Inside Look at our Next Gen Object Storage Launch

...

Linux Distros Unpatched Vulnerability : CVE-2021-39900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary...

MAL-2025-28044 Malicious code in object-storage-service (npm)

The package object-storage-service was found to contain malicious code...

Malicious code in object-storage-service (npm)

The package object-storage-service was found to contain malicious code...

MAL-2025-34706 Malicious code in tencentcloud-cos-sdk-react-native (npm)

The package tencentcloud-cos-sdk-react-native was found to contain malicious code...

Security Bulletin: Vulnerability with spring-security-crypto and jinja affect IBM Cloud Object Storage Systems (July 2025)

Summary Vulnerability with spring-security-crypto CVE-2025-22228 and jinja CVE-2025-27516 . This vulnerability has been addressed in the latest ClevOS release. Vulnerability Details CVEID:CVE-2025-22228 DESCRIPTION: BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for...