EUVD-2025-6266

Malicious code in bioql PyPI...

CVE-2025-25977

An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement...

CVE-2025-25977

An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the StyleElement class. This vulnerability is associated with CWE-1321 (Prototype Pollution). Currently, there is no vendor-supplied patch available for the impacted packages on Linux/Unix hosts.