EUVD-2022-0618

Malicious code in bioql PyPI...

EUVD-2025-18856

Malicious code in bioql PyPI...

EUVD-2022-7138

Malicious code in bioql PyPI...

EUVD-2022-0673

Malicious code in bioql PyPI...

EUVD-2023-0554

Malicious code in bioql PyPI...

EUVD-2023-1831

Malicious code in bioql PyPI...

EUVD-2025-29032

Malicious code in bioql PyPI...

EUVD-2024-1252

Malicious code in bioql PyPI...

EUVD-2023-51193

Malicious code in bioql PyPI...

EUVD-2023-33711

Malicious code in bioql PyPI...

EUVD-2025-29527

Malicious code in bioql PyPI...

EUVD-2023-1790

Malicious code in bioql PyPI...

EUVD-2022-6456

Malicious code in bioql PyPI...

EUVD-2022-7081

Malicious code in bioql PyPI...

EUVD-2022-0162

Malicious code in bioql PyPI...

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

...

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...

PT-2025-40292

Name of the Vulnerable Software and Affected Versions Poppler versions 24.06.1 through 25.04.0 Description The software is susceptible to a stack consumption issue leading to a SIGSEGV signal. This occurs when processing PDF documents containing deeply nested structures within their metadata, suc...