EUVD-2025-7000

Malicious code in bioql PyPI...

CVE-2024-12215 Remote Code Execution in kedro-org/kedro

In kedro-org/kedro version 0.19.8, the pullpackage API function allows users to download and extract micro packages from the Internet. However, the function projectwheelmetadata within the code path can execute the setup.py file inside the tar file, leading to remote code execution RCE by running...