EUVD-2024-16864

Malicious code in bioql PyPI...

EUVD-2025-25235

Malicious code in bioql PyPI...

EUVD-2023-31806

Malicious code in bioql PyPI...

EUVD-2022-34245

Malicious code in bioql PyPI...

EUVD-2024-38904

Malicious code in bioql PyPI...

EUVD-2022-34243

Malicious code in bioql PyPI...

EUVD-2025-6392

Malicious code in bioql PyPI...

EUVD-2025-8497

Malicious code in bioql PyPI...

EUVD-2022-15967

Malicious code in bioql PyPI...

EUVD-2023-56795

Malicious code in bioql PyPI...

EUVD-2024-49428

Malicious code in bioql PyPI...

EUVD-2025-20595

Malicious code in bioql PyPI...

EUVD-2025-27861

Malicious code in bioql PyPI...

EUVD-2022-6760

Malicious code in bioql PyPI...

EUVD-2022-0419

Malicious code in bioql PyPI...

EUVD-2023-49494

Malicious code in bioql PyPI...

RLSA-2025:8125 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919 For more details about...

CVE-2025-9945

The Optimize More! – CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the resetplugin function. This makes it possible for unauthenticated attackers to reset the plugin's...

External Data Extraction Attacks against Retrieval-Augmented Large Language Models

In recent years, RAG has emerged as a key paradigm for enhancing large language models LLMs. By integrating externally retrieved information, RAG alleviates issues like outdated knowledge and, crucially, insufficient domain expertise. While effective, RAG introduces new risks of external data...

Cache Key Confusion

Next.js is vulnerable to cache key confusion. The vulnerability is due to improper handling of request headers in the Image Optimization API routes, which allows an attacker to receive cached image responses intended for authorized users...