Automatically generated suggestions

to queue a suggestion for refinement.

to remove a suggestion from the queue.

CVE-2025-31181

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 8 months, 3 weeks ago

Gnuplot: gnuplot segmentation fault on x11_graphics

A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.

Affected products

gnuplot

<6.1

Matching in nixpkgs

pkgs.gnuplot

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixos-unstable-small 6.0.1
- nixpkgs-unstable 6.0.1

pkgs.gnuplot_qt

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixos-unstable-small 6.0.1
- nixpkgs-unstable 6.0.1

pkgs.feedgnuplot

General purpose pipe-oriented plotting tool

nixos-unstable 1.61
- nixos-unstable-small 1.61
- nixpkgs-unstable 1.61

pkgs.gnuplot_aquaterm

Portable command-line driven graphing utility for many platforms

nixos-unstable 6.0.1
- nixos-unstable-small 6.0.1
- nixpkgs-unstable 6.0.1

pkgs.emacsPackages.gnuplot

nixos-unstable 20240914.1522
- nixos-unstable-small 20240914.1522
- nixpkgs-unstable 20240914.1522

pkgs.haskellPackages.gnuplot

2D and 3D plots using gnuplot

nixos-unstable 0.5.7
- nixos-unstable-small 0.5.7
- nixpkgs-unstable 0.5.7

pkgs.emacsPackages.gnuplot-mode

nixos-unstable 20171013.1616
- nixos-unstable-small 20171013.1616
- nixpkgs-unstable 20171013.1616

pkgs.haskellPackages.gnuplot.x86_64-linux

2D and 3D plots using gnuplot

nixos-unstable ???
- nixpkgs-unstable 0.5.7

pkgs.haskellPackages.gnuplot.aarch64-linux

2D and 3D plots using gnuplot

nixos-unstable ???
- nixpkgs-unstable 0.5.7

pkgs.haskellPackages.gnuplot.x86_64-darwin

2D and 3D plots using gnuplot

nixos-unstable ???
- nixpkgs-unstable 0.5.7

pkgs.haskellPackages.gnuplot.aarch64-darwin

2D and 3D plots using gnuplot

nixos-unstable ???
- nixpkgs-unstable 0.5.7

pkgs.chickenPackages_5.chickenEggs.gnuplot-pipe

A simple interface to Gnuplot

nixos-unstable 0.4.2
- nixos-unstable-small 0.4.2
- nixpkgs-unstable 0.4.2

pkgs.vimPlugins.nvim-treesitter-parsers.gnuplot

nixos-unstable ???
- nixos-unstable-small
- nixpkgs-unstable

Package maintainers: 3

@lovek323 Jason O'Conal <jason@oconal.id.au>
@mnacamura Mitsuhiro Nakamura <m.nacamura@gmail.com>
@thielema Henning Thielemann <nix@henning-thielemann.de>

CVE-2023-0592

5.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): HIGH
Availability impact (A): NONE

created 8 months, 3 weeks ago

Path traversal in jefferson

A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.

Affected products

jefferson

<0.4.1

Matching in nixpkgs

pkgs.jefferson

JFFS2 filesystem extraction tool

nixos-unstable 0.4.5
- nixos-unstable-small 0.4.5
- nixpkgs-unstable 0.4.5

Package maintainers: 2

@tnias Philipp Bartsch <phil@grmr.de>
@vlaci László Vaskó <laszlo.vasko@outlook.com>

CVE-2025-28855

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

created 8 months, 3 weeks ago

WordPress Teleport plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Teleport allows Reflected XSS. This issue affects Teleport: from n/a through 1.2.4.

Affected products

teleport

=<1.2.4

Matching in nixpkgs

pkgs.teleport

Certificate authority and access plane for SSH, Kubernetes, web applications, and databases

nixos-unstable 16.4.6
- nixos-unstable-small 16.4.6
- nixpkgs-unstable 16.4.6

pkgs.teleport_15

Certificate authority and access plane for SSH, Kubernetes, web applications, and databases

nixos-unstable 15.4.21
- nixos-unstable-small 15.4.21
- nixpkgs-unstable 15.4.21

pkgs.teleport_16

Certificate authority and access plane for SSH, Kubernetes, web applications, and databases

nixos-unstable 16.4.6
- nixos-unstable-small 16.4.6
- nixpkgs-unstable 16.4.6

pkgs.lomiri.teleports

Ubuntu Touch Telegram client

nixos-unstable 1.20
- nixos-unstable-small 1.20
- nixpkgs-unstable 1.20

pkgs.emacsPackages.teleport

nixos-unstable 20240718.652
- nixos-unstable-small 20240718.652
- nixpkgs-unstable 20240718.652

pkgs.lomiri.teleports.x86_64-linux

Ubuntu Touch Telegram client

nixos-unstable ???
- nixos-unstable-small 1.20

pkgs.lomiri.teleports.aarch64-linux

Ubuntu Touch Telegram client

nixos-unstable ???
- nixos-unstable-small 1.20

pkgs.obs-studio-plugins.obs-teleport

OBS Studio plugin for an open NDI-like replacement

nixos-unstable 0.7.3
- nixos-unstable-small 0.7.3
- nixpkgs-unstable 0.7.3

Package maintainers: 7

@techknowlogick techknowlogick <techknowlogick@gitea.com>
@freezeboy freezeboy
@arianvp Arian van Putten <arian.vanputten@gmail.com>
@justinas Justinas Stankevičius <justinas@justinas.org>
@sigma Yann Hodique <yann.hodique@gmail.com>
@tomberek Thomas Bereknyei <tomberek@gmail.com>
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>

CVE-2025-28916

9.8 CRITICAL

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 8 months, 3 weeks ago

WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Docpro allows PHP Local File Inclusion. This issue affects Docpro: from n/a through 2.0.1.

Affected products

docpro

=<2.0.1

Matching in nixpkgs

pkgs.python311Packages.jupyter-docprovider

JupyterLab/Jupyter Notebook 7+ extension integrating collaborative shared models

nixos-unstable 1.0.1
- nixos-unstable-small 1.0.1
- nixpkgs-unstable 1.0.1

pkgs.python312Packages.jupyter-docprovider

JupyterLab/Jupyter Notebook 7+ extension integrating collaborative shared models

nixos-unstable 1.0.1
- nixos-unstable-small 1.0.1
- nixpkgs-unstable 1.0.1

pkgs.python312Packages.jupyter-docprovider.x86_64-linux

JupyterLab/Jupyter Notebook 7+ extension integrating collaborative shared models

nixos-unstable 1.0.1

pkgs.python312Packages.jupyter-docprovider.aarch64-linux

JupyterLab/Jupyter Notebook 7+ extension integrating collaborative shared models

nixos-unstable 1.0.1

pkgs.python312Packages.jupyter-docprovider.x86_64-darwin

JupyterLab/Jupyter Notebook 7+ extension integrating collaborative shared models

nixos-unstable 1.0.1

pkgs.python312Packages.jupyter-docprovider.aarch64-darwin

JupyterLab/Jupyter Notebook 7+ extension integrating collaborative shared models

nixos-unstable 1.0.1

Package maintainers: 3

@thomasjm Tom McLaughlin <tom@codedown.io>
@GaetanLepage Gaetan Lepage <gaetan@glepage.com>
@natsukium Tomoya Otabi <nixpkgs@natsukium.com>

CVE-2025-28873

8.5 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): CHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): NONE
Availability impact (A): LOW

created 8 months, 3 weeks ago

WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Shuffle allows Blind SQL Injection. This issue affects Shuffle: from n/a through 0.5.

Affected products

shuffle

=<0.5

Matching in nixpkgs