969 matches found
GHSA-JFX9-29X2-RV3J pypdf can exhaust RAM via manipulated LZWDecode streams
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. Patches This has been fixed in pypdf==6.1.3. Workarounds If you cannot upgrade yet, consider applying the changes from P...
A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises
Lack of memory safety is such a predominant cause of security issues that we have a responsibility as professional software engineering to robustly mitigate it in security-sensitive use cases—by using memory safe languages. Similarly, I have the growing impression that software supply chain...
EUVD-2021-18778
Malware in sbrugna...
EUVD-2021-19580
Malware in sbrugna...
EUVD-2021-9998
Malicious code in bioql PyPI...
EUVD-2023-0268
Malicious code in bioql PyPI...
EUVD-2022-45037
Malicious code in bioql PyPI...
EUVD-2025-28133
Malicious code in bioql PyPI...
EUVD-2023-27851
Malicious code in bioql PyPI...
EUVD-2024-35854
Malicious code in bioql PyPI...
EUVD-2022-6338
Malicious code in bioql PyPI...
EUVD-2023-0443
Malicious code in bioql PyPI...
EUVD-2025-20825
Malicious code in bioql PyPI...
EUVD-2024-42300
Malicious code in bioql PyPI...
EUVD-2025-31664
Malicious code in bioql PyPI...
EUVD-2022-3278
Malicious code in bioql PyPI...
EUVD-2023-34931
Malicious code in bioql PyPI...
EUVD-2023-27852
Malicious code in bioql PyPI...
EUVD-2025-27053
Malicious code in bioql PyPI...
CVE-2025-61584
serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the...