EUVD-2025-30970

Malicious code in bioql PyPI...

CVE-2025-48868

Horilla 1.3.0 contains an authenticated RCE in the project_bulk_archive view due to unsafe use of Python eval on a user-controlled parameter. The underlying issue can allow privileged users to execute arbitrary commands on the server; DEBUG=True makes exploitation easier by returning command outp...