Nixpkgs security tracker

Try the new UI
Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
created 1 week, 4 days ago Activity log
  • Created & dismissed (no matching packages found) suggestion
A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function …

A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled font index.

Affected products

n/a
  • ==n/a