Nixpkgs security tracker

Try the new UI
Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2026-39039
created 1 week, 3 days ago Activity log
  • Created & dismissed (no matching packages found) suggestion 1 week, 3 days ago
In BharatMLStack up to and including v1.3.0, Trufflebox UI stores …

In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage, which is fully accessible to any JavaScript running on the page.

Affected products

n/a
  • ==n/a