EUVD-2023-1524

Malicious code in bioql PyPI...

EUVD-2023-1634

Malicious code in bioql PyPI...

EUVD-2025-29457

Malicious code in bioql PyPI...

EUVD-2022-46845

Malicious code in bioql PyPI...

EUVD-2023-0306

Malicious code in bioql PyPI...

CVE-2025-10672

A vulnerability was found in whuan132 AIBattery up to 1.0.9. The affected element is an unknown function of the file AIBatteryHelper/XPC/BatteryXPCService.swift of the component com.collweb.AIBatteryHelper. The manipulation results in missing authentication. The attack requires a local approach...

CVE-2025-58818

Cross-Site Request Forgery CSRF vulnerability in SwiftNinjaPro Developer Tools Blocker swiftninjapro-inspect-element-console-blocker allows Cross Site Request Forgery.This issue affects Developer Tools Blocker: from n/a through = 3.2.1...

Linux Distros Unpatched Vulnerability : CVE-2017-8761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures ...

Linux Distros Unpatched Vulnerability : CVE-2016-10074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mail transport aka SwiftTransportMailTransport in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and...

Linux Distros Unpatched Vulnerability : CVE-2022-47950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the...

Linux Distros Unpatched Vulnerability : CVE-2016-9590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage...

Remote Code Execution (RCE)

ms-swift is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization because yaml.load from PyYAML is used in tests/run.py, allowing attackers to execute arbitrary code via a crafted YAML configuration file...

Malicious code in swift-search (npm)

The package swift-search was found to contain malicious code...

MAL-2025-9387 Malicious code in @swift-paypal/wat-scripts (npm)

The package @swift-paypal/wat-scripts was found to contain malicious code...

MAL-2025-34288 Malicious code in swift-playground-builder (npm)

The package swift-playground-builder was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7497eaf30807c4afb0f3fa20c31f6d49765e5e6ba1af3087e06e22a7b21a6ec1 This package installs a dependency hosted on a custom domain tha...

Malicious code in swift-playground-builder (npm)

The package swift-playground-builder was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7497eaf30807c4afb0f3fa20c31f6d49765e5e6ba1af3087e06e22a7b21a6ec1 This package installs a dependency hosted on a custom domain tha...

Malicious code in @swift-paypal/wat-scripts (npm)

The package @swift-paypal/wat-scripts was found to contain malicious code...

Malicious code in graphql_swift_gen (npm)

The package graphqlswiftgen was found to contain malicious code...

MAL-2025-34289 Malicious code in swift-search (npm)

The package swift-search was found to contain malicious code...

Asymmetric Resource Consumption (Amplification)

Overview apple/swift-nio-http2 is a HTTP/2 support for SwiftNIO. Affected versions of this package are vulnerable to Asymmetric Resource Consumption Amplification due to the handling of HTTP/2 connections. An attacker can cause resource exhaustion by interleaving malicious traffic with legitimate...