EUVD-2022-34243

Malicious code in bioql PyPI...

EUVD-2024-38904

Malicious code in bioql PyPI...

EUVD-2022-34244

Malicious code in bioql PyPI...

EUVD-2023-2324

Malicious code in bioql PyPI...

EUVD-2023-30340

Malicious code in bioql PyPI...

EUVD-2024-17095

Malicious code in bioql PyPI...

EUVD-2025-26244

Malicious code in bioql PyPI...

EUVD-2023-53669

Malicious code in bioql PyPI...

EUVD-2024-3043

Malicious code in bioql PyPI...

EUVD-2023-33090

Malicious code in bioql PyPI...

EUVD-2025-20595

Malicious code in bioql PyPI...

EUVD-2022-49661

Malicious code in bioql PyPI...

EUVD-2025-28624

Malicious code in bioql PyPI...

EUVD-2025-6392

Malicious code in bioql PyPI...

RLSA-2025:8125 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919 For more details about...

CVE-2025-9945

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the resetplugin function. This makes it possible for unauthenticated attackers to reset the plugin's...

External Data Extraction Attacks against Retrieval-Augmented Large Language Models

In recent years, RAG has emerged as a key paradigm for enhancing large language models LLMs. By integrating externally retrieved information, RAG alleviates issues like outdated knowledge and, crucially, insufficient domain expertise. While effective, RAG introduces new risks of external data...

Cache Key Confusion

Next.js is vulnerable to cache key confusion. The vulnerability is due to improper handling of request headers in the Image Optimization API routes, which allows an attacker to receive cached image responses intended for authorized users...

Security Bulletin: Multiple vulnerabilities may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-5889, CVE-2025-7339)

Summary There are multiple vulnerabilities in brace-expansion and on-headers used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-5889 DESCRIPTION: A vulnerability...

Security Bulletin: A vulnerability in Formidable (aka node-formidable) may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-46653)

Summary There is a vulnerability in Formidable aka node-formidable used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-46653 DESCRIPTION: Formidable aka...