⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Automatically generated suggestions

Create Draft to queue a suggestion for refinement.

Dismiss to remove a suggestion from the queue.

CVE-2024-56827
5.6 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 9 months, 2 weeks ago
Openjpeg: heap buffer overflow in lib/openjp2/j2k.c

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

openjpeg
*
openjpeg2
*
gimp:flatpak/openjpeg2

pkgs.openjpeg

Open-source JPEG 2000 codec written in C language

pkgs.python311Packages.pylibjpeg-openjpeg

A J2K and JP2 plugin for pylibjpeg

pkgs.python312Packages.pylibjpeg-openjpeg

A J2K and JP2 plugin for pylibjpeg

pkgs.python312Packages.pylibjpeg-openjpeg.x86_64-linux

A J2K and JP2 plugin for pylibjpeg
Package maintainers: 2
CVE-2024-7006
7.5 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 9 months, 2 weeks ago
Libtiff: null pointer dereference in tif_dirinfo.c

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.

libtiff
==4.0.9
*
==4.4.0

pkgs.libtiff

Library and utilities for working with the TIFF image file format

pkgs.libtiff.x86_64-linux

Library and utilities for working with the TIFF image file format

pkgs.libtiff.aarch64-linux

Library and utilities for working with the TIFF image file format

pkgs.libtiff.x86_64-darwin

Library and utilities for working with the TIFF image file format

pkgs.libtiff.aarch64-darwin

Library and utilities for working with the TIFF image file format
Package maintainers: 7
CVE-2022-47161
4.3 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): LOW
  • Availability impact (A): NONE
created 9 months, 2 weeks ago
WordPress Health Check & Troubleshooting Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in The WordPress.Org community Health Check & Troubleshooting plugin <= 1.5.1 versions.

health-check
=<1.5.1

pkgs.grpc-health-check

Minimal, high performance, memory-friendly, safe implementation of the gRPC health checking protocol

pkgs.python311Packages.django-health-check

Pluggable app that runs a full check on the deployment

pkgs.python312Packages.django-health-check

Pluggable app that runs a full check on the deployment

pkgs.rubyPackages.github-pages-health-check

pkgs.python311Packages.grpcio-health-checking

Standard Health Checking Service for gRPC

pkgs.python312Packages.grpcio-health-checking

Standard Health Checking Service for gRPC

pkgs.rubyPackages_3_1.github-pages-health-check

pkgs.rubyPackages_3_2.github-pages-health-check

pkgs.rubyPackages_3_3.github-pages-health-check

pkgs.rubyPackages_3_4.github-pages-health-check

pkgs.python312Packages.grpcio-health-checking.x86_64-linux

Standard Health Checking Service for gRPC

pkgs.python312Packages.grpcio-health-checking.aarch64-linux

Standard Health Checking Service for gRPC

pkgs.python312Packages.grpcio-health-checking.x86_64-darwin

Standard Health Checking Service for gRPC

pkgs.python312Packages.grpcio-health-checking.aarch64-darwin

Standard Health Checking Service for gRPC

pkgs.rubyPackages_3_1.github-pages-health-check.x86_64-linux

pkgs.rubyPackages_3_2.github-pages-health-check.x86_64-linux

pkgs.rubyPackages_3_3.github-pages-health-check.x86_64-linux

pkgs.rubyPackages_3_4.github-pages-health-check.x86_64-linux

pkgs.rubyPackages_3_1.github-pages-health-check.aarch64-linux

pkgs.rubyPackages_3_1.github-pages-health-check.x86_64-darwin

pkgs.rubyPackages_3_2.github-pages-health-check.aarch64-linux

pkgs.rubyPackages_3_2.github-pages-health-check.x86_64-darwin

pkgs.rubyPackages_3_3.github-pages-health-check.aarch64-linux

pkgs.rubyPackages_3_3.github-pages-health-check.x86_64-darwin

pkgs.rubyPackages_3_4.github-pages-health-check.aarch64-linux

pkgs.rubyPackages_3_4.github-pages-health-check.x86_64-darwin

pkgs.rubyPackages_3_1.github-pages-health-check.aarch64-darwin

pkgs.rubyPackages_3_2.github-pages-health-check.aarch64-darwin

pkgs.rubyPackages_3_3.github-pages-health-check.aarch64-darwin

pkgs.rubyPackages_3_4.github-pages-health-check.aarch64-darwin

Package maintainers: 4
CVE-2023-32550
9.3 CRITICAL
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): CHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): LOW
  • Availability impact (A): NONE
created 9 months, 2 weeks ago
Landscape's Apache server-status is accessible by default

Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.

landscape
<19.10.05

pkgs.terraform-landscape

Improve Terraform's plan output to be easier to read and understand

pkgs.ue4demos.landscape_mountains

Unreal Engine 4 Linux demos
  • nixos-unstable ???
    • nixos-unstable-small
    • nixpkgs-unstable
Package maintainers: 3
CVE-2023-32549
6.8 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): CHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): NONE
  • Availability impact (A): NONE
created 9 months, 2 weeks ago
Landscape insecure token generation

Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.

landscape
<19.10.05

pkgs.terraform-landscape

Improve Terraform's plan output to be easier to read and understand

pkgs.ue4demos.landscape_mountains

Unreal Engine 4 Linux demos
  • nixos-unstable ???
    • nixos-unstable-small
    • nixpkgs-unstable
Package maintainers: 3
CVE-2025-22511
6.5 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): REQUIRED
  • Scope (S): CHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): LOW
  • Availability impact (A): LOW
created 9 months, 2 weeks ago
WordPress Slides & Presentations Plugin <= 0.0.39 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ella van Durpe Slides & Presentations allows Stored XSS.This issue affects Slides & Presentations: from n/a through 0.0.39.

slide
=<0.0.39

pkgs.slides

Terminal based presentation tool

pkgs.openslide

C library that provides a simple interface to read whole-slide images

pkgs.manim-slides

Tool for live presentations using manim

pkgs.dvd-slideshow

Suite of command line programs that creates a slideshow-style video from groups of pictures

pkgs.slides.x86_64-linux

Terminal based presentation tool

pkgs.slides.aarch64-linux

Terminal based presentation tool

pkgs.slides.x86_64-darwin

Terminal based presentation tool

pkgs.slides.aarch64-darwin

Terminal based presentation tool

pkgs.gnomeExtensions.backslide

Automatic background-image (wallpaper) slideshow for Gnome Shell
  • nixos-unstable 33
    • nixos-unstable-small 33
    • nixpkgs-unstable 33

pkgs.python311Packages.openslide

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.python312Packages.openslide

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.python311Packages.manim-slides

Tool for live presentations using manim

pkgs.python312Packages.manim-slides

Tool for live presentations using manim

pkgs.vscode-extensions.antfu.slidev

pkgs.python311Packages.textual-slider

Textual widget for a simple slider

pkgs.python312Packages.textual-slider

Textual widget for a simple slider

pkgs.gnomeExtensions.wallpaper-slideshow

Wallpaper slideshow extension. Optionally downloads BING wallpaper of the day.
  • nixos-unstable 10
    • nixos-unstable-small 10
    • nixpkgs-unstable 10

pkgs.python312Packages.openslide.x86_64-linux

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.gnomeExtensions.keyboard-backlight-slider

Allow setting the keyboard backlight brightness with a slider in the main menu
  • nixos-unstable 6
    • nixos-unstable-small 6
    • nixpkgs-unstable 6

pkgs.python312Packages.openslide.aarch64-linux

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.python312Packages.openslide.x86_64-darwin

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.gnomeExtensions.night-light-slider-updated

Kiyui's Night Light Slider updated for GNOME >= 45. Provides a slider in the quick settings menu to control the night light temperature. Some nice options can be set in the extension preferences menu. Original implementation: https://codeberg.org/kiyui/gnome-shell-night-light-slider-extension/
  • nixos-unstable 12
    • nixos-unstable-small 12
    • nixpkgs-unstable 12

pkgs.python312Packages.openslide.aarch64-darwin

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.python312Packages.manim-slides.x86_64-linux

Tool for live presentations using manim

pkgs.vscode-extensions.antfu.slidev.x86_64-linux

pkgs.python312Packages.manim-slides.aarch64-linux

Tool for live presentations using manim

pkgs.vscode-extensions.antfu.slidev.aarch64-linux

pkgs.vscode-extensions.antfu.slidev.x86_64-darwin

pkgs.python312Packages.textual-slider.x86_64-linux

Textual widget for a simple slider

pkgs.vscode-extensions.antfu.slidev.aarch64-darwin

pkgs.python312Packages.textual-slider.aarch64-linux

Textual widget for a simple slider

pkgs.python312Packages.textual-slider.x86_64-darwin

Textual widget for a simple slider

pkgs.python312Packages.textual-slider.aarch64-darwin

Textual widget for a simple slider

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow.x86_64-linux

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow.aarch64-linux

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow.x86_64-darwin

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow.aarch64-darwin

Package maintainers: 9
CVE-2023-32551
6.1 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): CHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): LOW
  • Availability impact (A): NONE
created 9 months, 2 weeks ago
Landscape Open Redirect

Landscape allowed URLs which caused open redirection.

landscape
<19.10.05

pkgs.terraform-landscape

Improve Terraform's plan output to be easier to read and understand

pkgs.ue4demos.landscape_mountains

Unreal Engine 4 Linux demos
  • nixos-unstable ???
    • nixos-unstable-small
    • nixpkgs-unstable
Package maintainers: 3
CVE-2025-22534
5.4 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): LOW
  • Availability impact (A): LOW
created 9 months, 2 weeks ago
WordPress Slides & Presentations Plugin <= 0.0.39 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ella van Durpe Slides & Presentations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slides & Presentations: from n/a through 0.0.39.

slide
=<0.0.39

pkgs.slides

Terminal based presentation tool

pkgs.openslide

C library that provides a simple interface to read whole-slide images

pkgs.manim-slides

Tool for live presentations using manim

pkgs.dvd-slideshow

Suite of command line programs that creates a slideshow-style video from groups of pictures

pkgs.slides.x86_64-linux

Terminal based presentation tool

pkgs.slides.aarch64-linux

Terminal based presentation tool

pkgs.slides.x86_64-darwin

Terminal based presentation tool

pkgs.slides.aarch64-darwin

Terminal based presentation tool

pkgs.gnomeExtensions.backslide

Automatic background-image (wallpaper) slideshow for Gnome Shell
  • nixos-unstable 33
    • nixos-unstable-small 33
    • nixpkgs-unstable 33

pkgs.python311Packages.openslide

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.python312Packages.openslide

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.python311Packages.manim-slides

Tool for live presentations using manim

pkgs.python312Packages.manim-slides

Tool for live presentations using manim

pkgs.vscode-extensions.antfu.slidev

pkgs.python311Packages.textual-slider

Textual widget for a simple slider

pkgs.python312Packages.textual-slider

Textual widget for a simple slider

pkgs.gnomeExtensions.wallpaper-slideshow

Wallpaper slideshow extension. Optionally downloads BING wallpaper of the day.
  • nixos-unstable 10
    • nixos-unstable-small 10
    • nixpkgs-unstable 10

pkgs.python312Packages.openslide.x86_64-linux

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.gnomeExtensions.keyboard-backlight-slider

Allow setting the keyboard backlight brightness with a slider in the main menu
  • nixos-unstable 6
    • nixos-unstable-small 6
    • nixpkgs-unstable 6

pkgs.python312Packages.openslide.aarch64-linux

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.python312Packages.openslide.x86_64-darwin

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.gnomeExtensions.night-light-slider-updated

Kiyui's Night Light Slider updated for GNOME >= 45. Provides a slider in the quick settings menu to control the night light temperature. Some nice options can be set in the extension preferences menu. Original implementation: https://codeberg.org/kiyui/gnome-shell-night-light-slider-extension/
  • nixos-unstable 12
    • nixos-unstable-small 12
    • nixpkgs-unstable 12

pkgs.python312Packages.openslide.aarch64-darwin

Python bindings to the OpenSlide library for reading whole-slide microscopy images

pkgs.python312Packages.manim-slides.x86_64-linux

Tool for live presentations using manim

pkgs.vscode-extensions.antfu.slidev.x86_64-linux

pkgs.python312Packages.manim-slides.aarch64-linux

Tool for live presentations using manim

pkgs.vscode-extensions.antfu.slidev.aarch64-linux

pkgs.vscode-extensions.antfu.slidev.x86_64-darwin

pkgs.python312Packages.textual-slider.x86_64-linux

Textual widget for a simple slider

pkgs.vscode-extensions.antfu.slidev.aarch64-darwin

pkgs.python312Packages.textual-slider.aarch64-linux

Textual widget for a simple slider

pkgs.python312Packages.textual-slider.x86_64-darwin

Textual widget for a simple slider

pkgs.python312Packages.textual-slider.aarch64-darwin

Textual widget for a simple slider

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow.x86_64-linux

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow.aarch64-linux

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow.x86_64-darwin

pkgs.vscode-extensions.ms-toolsai.vscode-jupyter-slideshow.aarch64-darwin

Package maintainers: 9
CVE-2023-6277
6.5 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 9 months, 2 weeks ago
Libtiff: out-of-memory in tiffopen via a craft file

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.

iv
tkimg
libtiff
mingw-libtiff
compat-libtiff3

pkgs.libtiff

Library and utilities for working with the TIFF image file format

pkgs.libtiff.x86_64-linux

Library and utilities for working with the TIFF image file format

pkgs.libtiff.aarch64-linux

Library and utilities for working with the TIFF image file format

pkgs.libtiff.x86_64-darwin

Library and utilities for working with the TIFF image file format

pkgs.libtiff.aarch64-darwin

Library and utilities for working with the TIFF image file format
Package maintainers: 7
CVE-2023-6596
7.5 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): NONE
  • Availability impact (A): HIGH
created 9 months, 2 weeks ago
Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)

An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Containers.

openshift
<4.11.58
<4.12.48
openshift4/ose-olm-rukpak-rhel8
openshift4/ose-operator-lifecycle-manager
*

pkgs.openshift

Build, deploy, and manage your applications with Docker and Kubernetes

pkgs.python311Packages.openshift

Python client for the OpenShift API

pkgs.python312Packages.openshift

Python client for the OpenShift API

pkgs.python312Packages.openshift.x86_64-linux

Python client for the OpenShift API

pkgs.python312Packages.openshift.aarch64-linux

Python client for the OpenShift API

pkgs.python312Packages.openshift.x86_64-darwin

Python client for the OpenShift API

pkgs.python312Packages.openshift.aarch64-darwin

Python client for the OpenShift API

pkgs.python311Packages.azure-mgmt-redhatopenshift

Microsoft Azure Red Hat Openshift Management Client Library for Python

pkgs.python312Packages.azure-mgmt-redhatopenshift

Microsoft Azure Red Hat Openshift Management Client Library for Python
Package maintainers: 4