EUVD-2024-48468

Malicious code in bioql PyPI...

EUVD-2023-12510

Malicious code in bioql PyPI...

EUVD-2025-16930

Malicious code in bioql PyPI...

EUVD-2022-1828

Malicious code in bioql PyPI...

EUVD-2025-0113

Malicious code in bioql PyPI...

EUVD-2023-32474

Malicious code in bioql PyPI...

EUVD-2022-5894

Malicious code in bioql PyPI...

EUVD-2023-2675

Malicious code in bioql PyPI...

EUVD-2024-32920

Malicious code in bioql PyPI...

EUVD-2023-0532

Malicious code in bioql PyPI...

EUVD-2025-4744

Malicious code in bioql PyPI...

EUVD-2025-14675

Malicious code in bioql PyPI...

EUVD-2024-0857

Malicious code in bioql PyPI...

EUVD-2022-46838

Malicious code in bioql PyPI...

EUVD-2025-19228

Malicious code in bioql PyPI...

EUVD-2023-0337

Malicious code in bioql PyPI...

RLSA-2025:7490 Important: mod_auth_openidc security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc allows OIDCProviderAuthRequestMethod POSTs to leak...

CVE-2025-59426

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...

CVE-2025-59363

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...

CVE-2025-59363

In One Identity OneLogin prior to 2025.3.0, the GET /api/2/apps endpoint returned OIDC client_secret values alongside app metadata, enabling disclosure of sensitive credentials. This is caused by excessive data being returned by the Apps API v2 and constitutes a breach of confidentiality for OIDC...