EUVD-2025-12659

Malicious code in bioql PyPI...

EUVD-2025-12745

Malicious code in bioql PyPI...

EUVD-2023-24160

Malicious code in bioql PyPI...

EUVD-2025-25193

Malicious code in bioql PyPI...

EUVD-2025-23042

Malicious code in bioql PyPI...

EUVD-2025-19034

Malicious code in bioql PyPI...

EUVD-2023-32421

Malicious code in bioql PyPI...

EUVD-2022-42464

Malicious code in bioql PyPI...

EUVD-2023-58737

Malicious code in bioql PyPI...

EUVD-2024-41714

Malicious code in bioql PyPI...

EUVD-2022-0533

Malicious code in bioql PyPI...

EUVD-2022-15985

Malicious code in bioql PyPI...

EUVD-2024-44834

Malicious code in bioql PyPI...

EUVD-2023-0845

Malicious code in bioql PyPI...

EUVD-2024-46026

Malicious code in bioql PyPI...

EUVD-2021-28281

Malicious code in bioql PyPI...

EUVD-2022-4131

Malicious code in bioql PyPI...

Insufficient Session Expiration

weblate is vulnerable to Insufficient Session Expiration. The vulnerability is due to unsafe settings for the second factor in 2FA due to sessions being allowed to persist for an unusually long period, and an attacker can maintain a valid session to repeatedly attempt authentication, thereby...

Omise: 2FA requirement bypass when inviting team members

The application's requirement for users to enable 2FA before sending team invitations was bypassed by modifying client-side responses. This allowed invitations to be sent without enabling 2FA, defeating the security requirement...

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

GitHub on Monday announced that it will be changing its authentication and publishing options "in the near future" in response to a recent wave of supply chain attacks targeting the npm ecosystem, including the Shai-Hulud attack. This includes steps to address threats posed by token abuse and...