EUVD-2024-3048

Malicious code in bioql PyPI...

EUVD-2025-6862

Malicious code in bioql PyPI...

EUVD-2024-52649

Malicious code in bioql PyPI...

EUVD-2024-3475

Malicious code in bioql PyPI...

EUVD-2023-59015

Malicious code in bioql PyPI...

EUVD-2024-46054

Malicious code in bioql PyPI...

EUVD-2023-1708

Malicious code in bioql PyPI...

EUVD-2021-27973

Malicious code in bioql PyPI...

EUVD-2025-28122

Malicious code in bioql PyPI...

EUVD-2024-2240

Malicious code in bioql PyPI...

EUVD-2024-37378

Malicious code in bioql PyPI...

EUVD-2025-25785

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient input filtering of input by web applications such as chat box and agent workflow processes. An attacker can execute arbitrary JavaScript code in the victim's browse...

Apache Airflow Unauthenticated Access

Apache Airflow is a platform to programmatically author, schedule and monitor workflows. When authentication is not enabled, an attacker can access the Airflow web interface without any credentials. This may allow an attacker to view and modify workflows, access sensitive information, and...

CVE-2025-8556 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, argo-events-fips, guac, hydra, neuvector-sigstore-interface, crossplane-provider-gcp, crossplane-provider-family-aws, kubescape, argo-cd, argocd-image-updater, buildkitd-fips, cloudbeat-fips, terraform-provider-pagerduty, sops, nuclei,...

Automating Pentest Delivery: 7 Key Workflows for Maximum Impact

Penetration testing is critical to uncovering real-world security weaknesses. With the shift into continuous testing and validation, it is time we automate the delivery of these results. The way results are delivered hasn't kept up with today's fast-moving threat landscape. Too often, findings ar...

How Leading Security Teams Blend AI + Human Workflows (Free Webinar)

AI is changing automation—but not always for the better. That's why we're hosting a new webinar, "Workflow Clarity: Where AI Fits in Modern Automation," with Thomas Kinsella, Co-founder & Chief Customer Officer at Tines, to explore how leading teams are cutting through the hype and building...

Obsidian-framework

Obsidian Framework 🛡️ An advanced, template-driven se...

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

GitHub on Monday announced that it will be changing its authentication and publishing options "in the near future" in response to a recent wave of supply chain attacks targeting the npm ecosystem, including the Shai-Hulud attack. This includes steps to address threats posed by token abuse and...

How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines

Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform's Community Edition. The workflow we are highlighting...