EUVD-2022-2294

Malicious code in bioql PyPI...

EUVD-2022-51562

Malicious code in bioql PyPI...

EUVD-2022-5366

Malicious code in bioql PyPI...

EUVD-2022-49076

Malicious code in bioql PyPI...

EUVD-2024-0357

Malicious code in bioql PyPI...

EUVD-2024-27818

Malicious code in bioql PyPI...

EUVD-2023-26544

Malicious code in bioql PyPI...

EUVD-2024-3251

Malicious code in bioql PyPI...

EUVD-2025-29021

Malicious code in bioql PyPI...

EUVD-2022-7104

Malicious code in bioql PyPI...

EUVD-2023-33963

Malicious code in bioql PyPI...

EUVD-2022-2192

Malicious code in bioql PyPI...

EUVD-2022-0004

Malicious code in bioql PyPI...

EUVD-2022-0005

Malicious code in bioql PyPI...

SonarQube 操作系统命令注入漏洞

SonarQube is a code inspection tool from Sonar Open Source. An operating system command injection vulnerability exists in SonarQube versions 4.0.0 through prior to 6.0.0, which stems from a failure to properly validate user input on the Windows runner and could lead to arbitrary command execution...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: karpenter-fips, terraform-provider-tls-fips, bank-vaults, vexctl, prometheus-adapter, consul-fips, etcd-fips, rancher-machine, confluent-common-docker, azuredisk-csi-fips, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws-fips, checksec,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: karpenter-fips, terraform-provider-tls-fips, bank-vaults, vexctl, prometheus-adapter, consul-fips, etcd-fips, rancher-machine, confluent-common-docker, azuredisk-csi-fips, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws-fips, checksec,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (=0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (=0.28.0) +18180 more potentially affected by CVE-2025-41249 via org.springframework:spring-core (>=6.0.0 <=6.1.21)

org.springframework:spring-core MAVEN version =6.0.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.12.1 - ai.djl.spring:djl-spring-boot-starter-autoconfigure =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto =0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-linux-x8664 =0.2...

BIT-GITLAB-2025-6769 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces...

CVE-2025-6769

An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces...