EUVD-2025-3970

Malicious code in bioql PyPI...

EUVD-2022-38174

Malicious code in bioql PyPI...

EUVD-2025-18897

Malicious code in bioql PyPI...

EUVD-2025-11905

Malicious code in bioql PyPI...

EUVD-2023-32834

Malicious code in bioql PyPI...

EUVD-2022-40972

Malicious code in bioql PyPI...

EUVD-2022-46876

Malicious code in bioql PyPI...

EUVD-2022-34222

Malicious code in bioql PyPI...

EUVD-2023-0700

Malicious code in bioql PyPI...

EUVD-2022-48282

Malicious code in bioql PyPI...

EUVD-2025-3981

Malicious code in bioql PyPI...

EUVD-2022-6486

Malicious code in bioql PyPI...

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.

...

Linux Distros Unpatched Vulnerability : CVE-2025-52968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to,...

Open Redirect

Overview googlesignin is a Sign in or up with Google for Rails applications Affected versions of this package are vulnerable to Open Redirect via the ensuresameorigin function in the redirectprotector.rb file. An attacker can cause users to be redirected to an attacker-controlled origin by...

CVE-2025-57821 Basecamp's Google Sign-In for Rails allowed redirects to a malformed URL

Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.0, it is possible to craft a malformed URL that passes the "same origin" check, resulting in the user being redirected to another origin. Rails applications configured to store the flash information in a...

CVE-2025-57821

CVE-2025-57821 concerns Basecamp’s Google Sign-In for Rails. Before v1.3.0, a malformed redirect URL can bypass the same-origin check, allowing redirects to an attacker-controlled origin. If Rails apps store flash data in a session cookie, this can be chained with an attack that injects arbitrary...

CVE-2025-57821: URL Redirection to Untrusted Site

Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.0, it is possible to craft a malformed URL that passes the "same origin" check, resulting in the user being redirected to another origin. Rails applications configured to store the flash information in a...

Linux Distros Unpatched Vulnerability : CVE-2022-45413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Using the S.browserfallbackurl parameter parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cookies to be sent.This issue only...

Linux Distros Unpatched Vulnerability : CVE-2024-1555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When opening a website using the firefox:// protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox 123. CVE-2024-155...