Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2026-28195

4.3 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): LOW
Availability impact (A): NONE

created 1 month, 3 weeks ago Activity log

Created suggestion 1 month, 3 weeks ago

In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers …

In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2025.11.3

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-25.11 1.33
- nixos-25.11-small 1.33
- nixpkgs-25.11-darwin 1.33

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-25.11 1.33
- nixos-25.11-small 1.33
- nixpkgs-25.11-darwin 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>