EUVD-2022-5624

Malicious code in bioql PyPI...

Bolt before 3.3.6 does not properly restrict access to _profiler routes

...

PT-2017-14538

Name of the Vulnerable Software and Affected Versions Bolt versions prior to 3.3.6 Description The issue is related to improper access restriction to profiler routes. It is connected to files EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php. Recommendations For...