EUVD-2023-2273

Malicious code in bioql PyPI...

EUVD-2023-2197

Malicious code in bioql PyPI...

CVE-2023-40826

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter...

care.better.pf4j:pf4j-kotlin-symbol-processing (>=1.0.0-RC1 <=2.3.21-1.0.4), cn.sliew:carp-dist (>=0.0.1 <=0.0.34) +832 more potentially affected by CVE-2023-40827 via org.pf4j:pf4j (>=2.0.0 <=3.9.0)

org.pf4j:pf4j MAVEN version =2.0.0, =1.0.0-RC1, =0.0.1, =0.0.42, =0.0.63, =0.0.64, =0.0.66, =0.0.63, =0.0.49, =0.0.61, =0.0.61, =0.0.13, =0.0.1, =0.0.33, =0.0.33, =0.0.33, =0.0.34 and more Source cves: CVE-2023-40827 Source advisory: OSV:GHSA-RVM8-J2CP-J592...

care.better.pf4j:pf4j-kotlin-symbol-processing (>=1.0.0-RC1 <=2.3.21-1.0.4), cn.sliew:carp-dist (>=0.0.1 <=0.0.34) +832 more potentially affected by CVE-2023-40826 via org.pf4j:pf4j (>=2.0.0 <=3.9.0)

org.pf4j:pf4j MAVEN version =2.0.0, =1.0.0-RC1, =0.0.1, =0.0.42, =0.0.63, =0.0.64, =0.0.66, =0.0.63, =0.0.49, =0.0.61, =0.0.61, =0.0.13, =0.0.1, =0.0.33, =0.0.33, =0.0.33, =0.0.34 and more Source cves: CVE-2023-40826 Source advisory: OSV:GHSA-3R28-RGP9-QGV4...

DEBIAN-CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

CVE-2023-40827

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter...

CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

UBUNTU-CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

CVE-2023-40828

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function...

CVE-2023-40827

An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter...