CVE-2025-61152

Removed by vendor...

CVE-2025-61152

python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...

CVE-2025-61152

The python-jose library (through version 3.3.0 ) allows JWT tokens using 'alg=none' to be decoded and accepted without cryptographic signature verification. This allows an attacker to craft forged tokens with arbitrary claims to bypass authentication, potentially leading to privilege escalation o...

EUVD-2020-0429

Malware in sbrugna...

EUVD-2019-0429

Malware in sbrugna...

EUVD-2021-16069

Malware in sbrugna...

EUVD-2020-19718

Malware in sbrugna...

EUVD-2024-0609

Malicious code in bioql PyPI...

EUVD-2022-5973

Malicious code in bioql PyPI...

EUVD-2022-0445

Malicious code in bioql PyPI...

EUVD-2024-2326

Malicious code in bioql PyPI...

EUVD-2025-16789

Malicious code in bioql PyPI...

EUVD-2024-25315

Malicious code in bioql PyPI...

EUVD-2025-25832

Malicious code in bioql PyPI...

EUVD-2025-25521

Malicious code in bioql PyPI...

EUVD-2024-47148

Malicious code in bioql PyPI...

EUVD-2022-2304

Malicious code in bioql PyPI...

EUVD-2022-1387

Malicious code in bioql PyPI...

EUVD-2025-6727

Malicious code in bioql PyPI...

EUVD-2025-32281

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...