EUVD-2024-52267

Malicious code in bioql PyPI...

EUVD-2022-4679

Malicious code in bioql PyPI...

EUVD-2022-55618

Malicious code in bioql PyPI...

EUVD-2023-37256

Malicious code in bioql PyPI...

EUVD-2023-45173

Malicious code in bioql PyPI...

EUVD-2022-29659

Malicious code in bioql PyPI...

EUVD-2024-1269

Malicious code in bioql PyPI...

EUVD-2025-27468

Malicious code in bioql PyPI...

EUVD-2025-28895

Malicious code in bioql PyPI...

EUVD-2023-0605

Malicious code in bioql PyPI...

EUVD-2022-55451

Malicious code in bioql PyPI...

EUVD-2023-59930

Malicious code in bioql PyPI...

EUVD-2023-59946

Malicious code in bioql PyPI...

EUVD-2025-29585

Malicious code in bioql PyPI...

EUVD-2025-31907

Malicious code in bioql PyPI...

SUSE CVE-2025-54286

Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...

CVE-2025-54286 CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...

CVE-2025-54286 CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.

...

PT-2025-40326

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 5.0 and later Description A Cross-Site Request Forgery CSRF issue exists in LXD-UI. This allows an attacker to create and start container instances without user consent by submitting crafted HTML forms that exploit clien...