EUVD-2025-19749

Malicious code in bioql PyPI...

EUVD-2025-27394

Malicious code in bioql PyPI...

EUVD-2021-6686

Malicious code in bioql PyPI...

EUVD-2022-2699

Malicious code in bioql PyPI...

EUVD-2022-2242

Malicious code in bioql PyPI...

EUVD-2024-30611

Malicious code in bioql PyPI...

EUVD-2025-9406

Malicious code in bioql PyPI...

EUVD-2022-44234

Malicious code in bioql PyPI...

EUVD-2022-52134

Malicious code in bioql PyPI...

EUVD-2022-5434

Malicious code in bioql PyPI...

EUVD-2024-33546

Malicious code in bioql PyPI...

EUVD-2025-14141

Malicious code in bioql PyPI...

EUVD-2022-30231

Malicious code in bioql PyPI...

EUVD-2022-31746

Malicious code in bioql PyPI...

EUVD-2022-1216

Malicious code in bioql PyPI...

[SECURITY] Fedora 41 Update: uv-0.8.11-4.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 43 Update: uv-0.8.11-4.fc43

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

CVE-2025-11149

This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes null bytes. This allows attackers to access http://host/%00 and crash the server. Mitigation Mitigation for this issue is...

Automating Pentest Delivery: 7 Key Workflows for Maximum Impact

Penetration testing is critical to uncovering real-world security weaknesses. With the shift into continuous testing and validation, it is time we automate the delivery of these results. The way results are delivered hasn't kept up with today's fast-moving threat landscape. Too often, findings ar...