EUVD-2025-16467

Malicious code in bioql PyPI...

EUVD-2022-6533

Malicious code in bioql PyPI...

EUVD-2024-2921

Malicious code in bioql PyPI...

EUVD-2024-2965

Malicious code in bioql PyPI...

EUVD-2025-25596

Malicious code in bioql PyPI...

EUVD-2024-2261

Malicious code in bioql PyPI...

EUVD-2025-21459

Malicious code in bioql PyPI...

EUVD-2025-7787

Malicious code in bioql PyPI...

EUVD-2025-8871

Malicious code in bioql PyPI...

EUVD-2024-1144

Malicious code in bioql PyPI...

PT-2025-42771

Name of the Vulnerable Software and Affected Versions NetBird VPN versions prior to 0.57.0 Description NetBird VPN, when installed using the vendor’s provided script, did not remove or change the default password of an admin account created by ZITADEL. This potentially allows for full remote...

CVE-2025-57770

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key due to a missing check in the AuthRequestRepository, which is exploitable via the "select account" page. An attacker can determine whether specific userIDs exist by observing responses to...

CVE-2025-57770

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...

CVE-2025-57770 ZITADEL user enumeration vulnerability in login UI

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...

CVE-2025-57770 ZITADEL user enumeration vulnerability in login UI

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...

CVE-2025-57770

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...

CVE-2025-57770

ZITadel CVE-2025-57770 describes a username enumeration flaw in the login UI. Affected versions include 4.0.0–4.0.2, 3.0.0–3.3.6, and all versions before 2.71.15. The login flow’s Ignoring unknown usernames security feature, intended to return the same response for valid and invalid usernames, ca...

CVE-2025-57770 ZITADEL user enumeration vulnerability in login UI

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...

ZITADEL 安全漏洞

ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the container and serverless era from the Swiss ZITADEL open source. A security vulnerability exists in ZITADEL versions 4.0.0 through 4.0.2, 3.0.0 through 3.3.6, and versions prior to 2.71.15...