EUVD-2024-53204

Malicious code in bioql PyPI...

EUVD-2022-40647

Malicious code in bioql PyPI...

EUVD-2025-5987

Malicious code in bioql PyPI...

EUVD-2025-20163

Malicious code in bioql PyPI...

EUVD-2024-34248

Malicious code in bioql PyPI...

EUVD-2024-51873

Malicious code in bioql PyPI...

EUVD-2021-34647

Malicious code in bioql PyPI...

EUVD-2024-50560

Malicious code in bioql PyPI...

EUVD-2025-5971

Malicious code in bioql PyPI...

EUVD-2024-48470

Malicious code in bioql PyPI...

EUVD-2021-7158

Malicious code in bioql PyPI...

EUVD-2024-54013

Malicious code in bioql PyPI...

EUVD-2025-12997

Malicious code in bioql PyPI...

EUVD-2024-45392

Malicious code in bioql PyPI...

SUSE CVE-2025-39927

In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating rparent before applying state Add validation to ensure the cached parent directory inode matches the directory info in MDS replies. This prevents client-side race conditions where concurrent...

CVE-2025-59842

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener...

CVE-2025-55558

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv and is compiled by Inductor, leading to a Denial of Service DoS. Mitigation Mitigation for this issue is either not available or the currentl...

Virtuozzo Hybrid Infrastructure 7.1 (7.1.0-179)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service, file and object storage, as well as updates. Additionally, this release delivers stability improvements and addresses issues found in previous releases. Vulnerability id: VSTOR-91660...

CVE-2025-59343

tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4, and 1.16.6. A workaround involves...

CVE-2025-10585

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...