python3.9 security update

An update is available for python3.9. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming language...

EUVD-2025-25476

Malicious code in bioql PyPI...

EUVD-2024-18831

Malicious code in bioql PyPI...

EUVD-2023-59902

Malicious code in bioql PyPI...

EUVD-2025-25412

Malicious code in bioql PyPI...

EUVD-2025-25131

Malicious code in bioql PyPI...

EUVD-2025-28396

Malicious code in bioql PyPI...

EUVD-2024-18833

Malicious code in bioql PyPI...

EUVD-2024-18834

Malicious code in bioql PyPI...

EUVD-2025-29335

Malicious code in bioql PyPI...

EUVD-2024-18832

Malicious code in bioql PyPI...

EUVD-2024-18644

Malicious code in bioql PyPI...

EUVD-2025-25440

Malicious code in bioql PyPI...

EUVD-2023-26291

Malicious code in bioql PyPI...

RLSA-2025:10140 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

UBUNTU-CVE-2025-10729

The module will parse a node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free...

MAL-2025-47903 Malicious code in mockup-plugin-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558235acfe4f70dc63b4fc13a84d52053efc759496cd14e3be1174f7ae4ee3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in affected-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d28082ed059e68e9aeb19f28b4d928db94d6f5392467f2fd362a468fd93bb6e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47877 Malicious code in ancestry-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71501ecab204074038c46b64372fcfd400a8f1b7375edff35e29d5b6bbe7500a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via the django.utils.archive.extract function used by startapp --template and startproject --template. An attacker can modify files outside the intended extraction directory by crafting an archive with file paths...