EUVD-2021-29505

Malicious code in bioql PyPI...

EUVD-2024-22277

Malicious code in bioql PyPI...

EUVD-2025-28697

Malicious code in bioql PyPI...

EUVD-2022-34226

Malicious code in bioql PyPI...

EUVD-2024-2124

Malicious code in bioql PyPI...

EUVD-2024-29732

Malicious code in bioql PyPI...

EUVD-2025-4312

Malicious code in bioql PyPI...

EUVD-2024-0190

Malicious code in bioql PyPI...

EUVD-2025-22758

Malicious code in bioql PyPI...

EUVD-2025-28965

Malicious code in bioql PyPI...

EUVD-2025-23117

Malicious code in bioql PyPI...

EUVD-2012-0857

Malicious code in bioql PyPI...

EUVD-2025-29276

Malicious code in bioql PyPI...

EUVD-2025-25951

Malicious code in bioql PyPI...

EUVD-2025-15875

Malicious code in bioql PyPI...

EUVD-2025-14111

Malicious code in bioql PyPI...

EUVD-2025-30835

Malicious code in bioql PyPI...

CVE-2025-61677: Deserialization of Untrusted Data

DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...

DataChain code-related vulnerabilities

DataChain is a version control software from Iterative open source. A code issue vulnerability exists in DataChain 0.34.1 and prior versions, which stems from failure to validate data when reading serialized objects from environment variables, which could lead to code execution...

CVE-2025-59952

MinIO Java SDK is a Simple Storage Service aka S3 client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically...