EUVD-2024-53126

Malicious code in bioql PyPI...

EUVD-2023-44184

Malicious code in bioql PyPI...

EUVD-2025-17529

Malicious code in bioql PyPI...

EUVD-2024-47655

Malicious code in bioql PyPI...

EUVD-2022-4725

Malicious code in bioql PyPI...

EUVD-2025-17526

Malicious code in bioql PyPI...

EUVD-2022-24564

Malicious code in bioql PyPI...

EUVD-2024-19927

Malicious code in bioql PyPI...

EUVD-2024-53509

Malicious code in bioql PyPI...

EUVD-2025-17525

Malicious code in bioql PyPI...

EUVD-2025-7399

Malicious code in bioql PyPI...

EUVD-2025-25699

Malicious code in bioql PyPI...

EUVD-2024-53127

Malicious code in bioql PyPI...

EUVD-2023-12935

Malicious code in bioql PyPI...

EUVD-2025-17524

Malicious code in bioql PyPI...

EUVD-2024-53128

Malicious code in bioql PyPI...

Formula Injection (CSV Injection)

unopim/unopim is vulnerable to Formula Injection CSV Injection. The vulnerability is due to malicious content inserted into a CSV file, which allows an attacker to exploit spreadsheet applications interpreting the input as formulas or commands instead of plain text...

The vulnerability of the setPath() function in the PHP Spreadsheet library, which allows an attacker to perform an SSRF attack

The vulnerability of the setPath function in the PHP Spreadsheet library is related to the manipulation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

CVE-2025-54370

PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0, SSRF can occur when a processed HTML document is read and displayed in the browser. The vulnerability lies in the setPath method of the...

CVE-2025-54370 PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser

PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0, SSRF can occur when a processed HTML document is read and displayed in the browser. The vulnerability lies in the setPath method of the...