EUVD-2025-4305

Malicious code in bioql PyPI...

CVE-2025-1412: Session Fixation

Mattermost versions 9.11.x = 9.11.6, 10.4.x = 10.4.1 fail to invalidate all active sessions when converting a user to a bot, with allows the converted user to escalate their privileges depending on the permissions granted to the bot...

GitHub: Persistent Unauthorized Administrative Access on All Organization Repositories via RC in User Conversion to Organization

A race condition was identified that could allow unauthorized administrative access when converting a user to an organization. This affected GitHub Enterprise Server versions since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1...