EUVD-2021-0188

Malware in sbrugna...

EUVD-2014-0067

Malware in sbrugna...

EUVD-2022-2540

Malicious code in bioql PyPI...

EUVD-2023-2537

Malicious code in bioql PyPI...

EUVD-2023-0204

Malicious code in bioql PyPI...

EUVD-2022-4607

Malicious code in bioql PyPI...

EUVD-2022-2315

Malicious code in bioql PyPI...

EUVD-2022-3641

Malicious code in bioql PyPI...

EUVD-2022-4170

Malicious code in bioql PyPI...

EUVD-2022-0205

Malicious code in bioql PyPI...

EUVD-2023-0209

Malicious code in bioql PyPI...

EUVD-2024-0263

Malicious code in bioql PyPI...

EUVD-2025-32021

Malicious code in bioql PyPI...

CVE-2025-61668 @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a...

mysticcelestial (1.0.1) potentially affected by CVE-2025-61668 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-61668 Source advisory: OSV:GHSA-M8RJ-PPPH-MJ33...

mysticcelestial (1.0.1) potentially affected by CVE-2025-61668 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-61668 Source advisory: SNYK:JS-PLONEVOLTO-13173379...

Denial Of Service (DoS)

@plone/volto is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of specific URL requests which allows an attacker to crash the NodeJS server component and cause downtime...

Linux Distros Unpatched Vulnerability : CVE-2016-7147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the managefindResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows...

CVE-2025-58047

Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when...

mysticcelestial (1.0.1) potentially affected by CVE-2025-58047 via @plone/volto (18.10.1)

@plone/volto NPM version 18.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @plone/volto and may be impacted: - mysticcelestial 1.0.1 Source cves: CVE-2025-58047 Source advisory: OSV:GHSA-XJHF-7833-3PM5...