EUVD-2024-2870

Malicious code in bioql PyPI...

EUVD-2024-50971

Malicious code in bioql PyPI...

EUVD-2022-7138

Malicious code in bioql PyPI...

EUVD-2025-17571

Malicious code in bioql PyPI...

EUVD-2025-7097

Malicious code in bioql PyPI...

EUVD-2024-3136

Malicious code in bioql PyPI...

EUVD-2022-0459

Malicious code in bioql PyPI...

EUVD-2023-27715

Malicious code in bioql PyPI...

EUVD-2025-17567

Malicious code in bioql PyPI...

EUVD-2023-0786

Malicious code in bioql PyPI...

EUVD-2022-4146

Malicious code in bioql PyPI...

EUVD-2022-3503

Malicious code in bioql PyPI...

EUVD-2022-0673

Malicious code in bioql PyPI...

EUVD-2022-7081

Malicious code in bioql PyPI...

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

...

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

...

PT-2025-40292

Name of the Vulnerable Software and Affected Versions Poppler versions 24.06.1 through 25.04.0 Description The software is susceptible to a stack consumption issue leading to a SIGSEGV signal. This occurs when processing PDF documents containing deeply nested structures within their metadata, suc...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...

CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated...