403 matches found
EUVD-2025-19715
Malicious code in bioql PyPI...
EUVD-2024-1847
Malicious code in bioql PyPI...
EUVD-2023-32301
Malicious code in bioql PyPI...
EUVD-2025-28464
Malicious code in bioql PyPI...
EUVD-2024-51083
Malicious code in bioql PyPI...
EUVD-2024-3567
Malicious code in bioql PyPI...
EUVD-2022-34278
Malicious code in bioql PyPI...
EUVD-2024-3568
Malicious code in bioql PyPI...
CVE-2025-58748
Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12 the H2 data source implementation H2.java does not verify that a provided JDBC URL starts with jdbc:h2. This lack of validation allows a crafted JDBC configuration that substitutes the Amazon...
CVE-2025-58748: Deserialization of Untrusted Data
Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12 the H2 data source implementation H2.java does not verify that a provided JDBC URL starts with jdbc:h2. This lack of validation allows a crafted JDBC configuration that substitutes the Amazon...
MAL-2025-44123 Malicious code in electron-redshift-hexo-nucleosynthesis (npm)
The package electron-redshift-hexo-nucleosynthesis was found to contain malicious code...
MAL-2025-45779 Malicious code in redshift-darkenergy-mongodb-node-sass (npm)
The package redshift-darkenergy-mongodb-node-sass was found to contain malicious code...
MAL-2025-45780 Malicious code in redshift-halley-hadron-rollup-plugin (npm)
The package redshift-halley-hadron-rollup-plugin was found to contain malicious code...
MAL-2025-45781 Malicious code in redshift-nuxtjs-antares-sedna (npm)
The package redshift-nuxtjs-antares-sedna was found to contain malicious code...
Malicious code in electron-redshift-hexo-nucleosynthesis (npm)
The package electron-redshift-hexo-nucleosynthesis was found to contain malicious code...
Malicious code in redshift-darkenergy-mongodb-node-sass (npm)
The package redshift-darkenergy-mongodb-node-sass was found to contain malicious code...
Malicious code in redshift-halley-hadron-rollup-plugin (npm)
The package redshift-halley-hadron-rollup-plugin was found to contain malicious code...
Malicious code in redshift-nuxtjs-antares-sedna (npm)
The package redshift-nuxtjs-antares-sedna was found to contain malicious code...
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to insecure connections due to the redshift package (CVE-2025-5279)
Summary Redshift is used by DataStage on Cloud Pak for Data as part of the dataset processing fuctionality. Vulnerability Details CVEID:CVE-2025-5279 DESCRIPTION: When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SS...