EUVD-2024-51510

Malicious code in bioql PyPI...

EUVD-2024-31357

Malicious code in bioql PyPI...

EUVD-2025-30951

Malicious code in bioql PyPI...

EUVD-2024-46007

Malicious code in bioql PyPI...

EUVD-2025-15515

Malicious code in bioql PyPI...

EUVD-2025-10026

Malicious code in bioql PyPI...

EUVD-2023-0301

Malicious code in bioql PyPI...

EUVD-2022-3022

Malicious code in bioql PyPI...

EUVD-2025-27823

Malicious code in bioql PyPI...

EUVD-2025-28092

Malicious code in bioql PyPI...

EUVD-2025-17639

Malicious code in bioql PyPI...

EUVD-2025-7207

Malicious code in bioql PyPI...

EUVD-2025-16787

Malicious code in bioql PyPI...

EUVD-2025-17311

Malicious code in bioql PyPI...

CVE-2025-61622

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stre...

Deserialization of Untrusted Data

Overview datachain is a Wrangle unstructured AI data at scale Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loader.py module. An attacker can execute arbitrary code by setting crafted environment variables that are deserialized by the application...

DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...

GHSA-6PX8-MR29-CJ4R DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...

GHSA-538V-3WQ9-4H3R Apache Pyfory python is vulnerable to deserialization of untrusted data

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stre...

Apache Pyfory python is vulnerable to deserialization of untrusted data

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stre...