Nixpkgs security tracker
6.5 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): REQUIRED
- Scope (S): UNCHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): HIGH
- Availability impact (A): NONE
Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 …
Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
References
Affected products
- <145.0.7632.45
Matching in nixpkgs
pkgs.netflix
Open Netflix in Google Chrome app mode
pkgs.chromedriver
WebDriver server for running Selenium tests on Chrome
-
nixos-unstable 139.0.7258.66
- nixpkgs-unstable 144.0.7559.109
- nixos-unstable-small 144.0.7559.109
-
nixos-25.11 143.0.7499.169
- nixpkgs-25.11-darwin 143.0.7499.169
pkgs.mkchromecast
Cast macOS and Linux Audio/Video to your Google Cast and Sonos Devices
-
nixos-unstable 2022-10-31
- nixpkgs-unstable 2025-12-21
- nixos-unstable-small 2025-12-21
-
nixos-25.11 2022-10-31
- nixpkgs-25.11-darwin 2022-10-31
pkgs.chrome-export
Scripts to save Google Chrome's bookmarks and history as HTML bookmarks files
pkgs.go-chromecast
CLI for Google Chromecast, Home devices and Cast Groups
pkgs.google-chrome
Freeware web browser developed by Google
-
nixos-unstable 138.0.7204.183
- nixpkgs-unstable 144.0.7559.109
- nixos-unstable-small 144.0.7559.109
-
nixos-25.11 143.0.7499.169
- nixpkgs-25.11-darwin 143.0.7499.169
pkgs.chrome-token-signing
Chrome and Firefox extension for signing with your eID on the web
pkgs.chrome-pak-customizer
Simple batch tool to customize pak files in chrome or chromium-based browser
-
nixos-unstable 2.0-unstable-2021-06-24
- nixpkgs-unstable 2.0-unstable-2021-06-24
- nixos-unstable-small 2.0-unstable-2021-06-24
-
nixos-25.11 2.0-unstable-2021-06-24
- nixpkgs-25.11-darwin 2.0-unstable-2021-06-24
pkgs.curl-impersonate-chrome
Special build of curl that can impersonate Chrome & Firefox
-
nixos-unstable 0.8.0
pkgs.undetected-chromedriver
Custom Selenium ChromeDriver that passes all bot mitigation systems
-
nixos-unstable 139.0.7258.66
- nixpkgs-unstable 144.0.7559.109
- nixos-unstable-small 144.0.7559.109
-
nixos-25.11 143.0.7499.169
- nixpkgs-25.11-darwin 143.0.7499.169
pkgs.electron-chromedriver_33
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_34
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_35
WebDriver server for running Selenium tests on Chrome
-
nixos-unstable 35.7.4
pkgs.electron-chromedriver_36
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_37
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_38
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_39
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_40
WebDriver server for running Selenium tests on Chrome
pkgs.xorg.xf86videoopenchrome
None
pkgs.ocamlPackages.chrome-trace
Chrome trace event generation library
pkgs.noto-fonts-monochrome-emoji
Monochrome emoji font
pkgs.python312Packages.pychromecast
Library for Python to communicate with the Google Chromecast
-
nixos-unstable 14.0.7
pkgs.python313Packages.pychromecast
Library for Python to communicate with the Google Chromecast
pkgs.python314Packages.pychromecast
Library for Python to communicate with the Google Chromecast
pkgs.ocamlPackages_latest.chrome-trace
Chrome trace event generation library
pkgs.python312Packages.undetected-chromedriver
Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems
-
nixos-unstable 3.5.5
pkgs.python313Packages.undetected-chromedriver
Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems
pkgs.python314Packages.undetected-chromedriver
Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems
Package maintainers
-
@bdesham Benjamin Esham <benjamin@esham.io>
-
@UlyssesZh Ulysses Zhan <ulysseszhan@gmail.com>
-
@mmahut Marek Mahut <marek.mahut@gmail.com>
-
@emilylange Emily Lange <nix@emilylange.de>
-
@networkException networkException <nix@nwex.de>
-
@liam-murphy14 Liam Murphy <liam.murphy137@gmail.com>
-
@yayayayaka Yaya <github@uwu.is>
-
@zi3m5f zi3m5f <k7n3o3a6f@mozmail.com>
-
@jnsgruk Jon Seager <jon@sgrs.uk>
-
@johnrtitor Masum Reza <masumrezarock100@gmail.com>
-
@nagisa Simonas Kazlauskas <nixpkgs@kazlauskas.me>
-
@Shou Benedict Aas <x+g@shou.io>
-
@roberth Robert Hensing <nixpkgs@roberthensing.nl>
-
@nicoonoclaste nicoo <nicoo@debian.org>
-
@abbradar Nikolay Amiantov <ab@fmap.me>
-
@TomaSajt TomaSajt
-
@teutat3s teutat3s <teutates@mailbox.org>