Nixpkgs security tracker
8.7 HIGH
- CVSS version (CVSS): 4.0
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Attack Requirement (AT): None (N)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Vulnerable System Impact Confidentiality (VC): High (H)
- Vulnerable System Impact Integrity (VI): High (H)
- Vulnerable System Impact Availability (VA): High (H)
- Subsequent System Impact Confidentiality (SC): None (N)
- Subsequent System Impact Integrity (SI): None (N)
- Subsequent System Impact Availability (SA): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Attack Requirement (MAT): None (N)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Vulnerable System Impact Confidentiality (MVC): High (H)
- Modified Vulnerable System Impact Integrity (MVI): High (H)
- Modified Vulnerable System Impact Availability (MVA): High (H)
- Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
- Modified Subsequent System Impact Integrity (MSI): Negligible (N)
- Modified Subsequent System Impact Availability (MSA): Negligible (N)
- Safety (S): Not Defined (X)
- Automatable (AU): Not Defined (X)
- Recovery (R): Not Defined (X)
- Value Density (V): Not Defined (X)
- Vulnerability Response Effort (RE): Not Defined (X)
- Provider Urgency (U): Not Defined (X)
- Confidentiality Req. (CR): Not Defined (X)
- Integrity Req. (IR): Not Defined (X)
- Availability Req. (AR): Not Defined (X)
- Exploit Maturity (E): Not Defined (X)
Activity log
- Created suggestion
luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey
luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated into a shell command without proper escaping or quoting. An authenticated LuCI user with OpenVPN protocol configuration access can inject arbitrary shell metacharacters into cl_meta to execute commands as root via the popen function.
References
-
-
Patch Commit patch
Affected products
- ==e4ff45ecbc6ad212951815c8c99b2749fbd7de6b
- =<0.11.1
Matching in nixpkgs
pkgs.lucide
Open-source icon library that provides 1000+ icons
pkgs.lucida-downloader
Multithreaded client for downloading music for free with lucida
pkgs.typstPackages.lucide
A Typst library for Lucide icons
pkgs.haskellPackages.lucid
Clear to write, read and edit DSL for HTML
-
nixos-unstable 2.11.20250303
- nixpkgs-unstable 2.11.20250303
- nixos-unstable-small 2.11.20250303
-
nixos-26.05 2.11.20250303
- nixos-26.05-small 2.11.20250303
- nixpkgs-26.05-darwin 2.11.20250303
pkgs.haskellPackages.lucid2
Clear to write, read and edit DSL for HTML
-
nixos-unstable 0.0.20250303
- nixpkgs-unstable 0.0.20250303
- nixos-unstable-small 0.0.20250303
-
nixos-26.05 0.0.20250303
- nixos-26.05-small 0.0.20250303
- nixpkgs-26.05-darwin 0.0.20250303
pkgs.haskellPackages.lucid-cdn
Curated list of CDN imports for lucid
pkgs.haskellPackages.lucid-svg
DSL for SVG using lucid for HTML
pkgs.haskellPackages.htmx-lucid
Use htmx with lucid
pkgs.haskellPackages.lucid-htmx
Use htmx in your lucid templates
pkgs.typstPackages.lucide_0_1_0
A Typst library for Lucide icons
pkgs.fontbhlucidatypewriter75dpi
Lucida Sans Typewriter 75dpi pcf fonts
-
nixos-unstable 75dpi-1.0.4
- nixpkgs-unstable 75dpi-1.0.4
- nixos-unstable-small 75dpi-1.0.4
-
nixos-26.05 75dpi-1.0.4
- nixos-26.05-small 75dpi-1.0.4
- nixpkgs-26.05-darwin 75dpi-1.0.4
pkgs.haskellPackages.Spock-lucid
Lucid support for Spock
pkgs.haskellPackages.cmark-lucid
Use cmark with Lucid
pkgs.fontbhlucidatypewriter100dpi
Lucida Sans Typewriter 100dpi pcf fonts
-
nixos-unstable 100dpi-1.0.4
- nixpkgs-unstable 100dpi-1.0.4
- nixos-unstable-small 100dpi-1.0.4
-
nixos-26.05 100dpi-1.0.4
- nixos-26.05-small 100dpi-1.0.4
- nixpkgs-26.05-darwin 100dpi-1.0.4
pkgs.haskellPackages.lucid-extras
Generate more HTML with Lucid - Bootstrap, Rdash, Vega-Lite, Leaflet JS, Email
pkgs.haskellPackages.lucid-xstatic
Lucid helper for XStatic
pkgs.haskellPackages.servant-lucid
Servant support for lucid
pkgs.font-bh-lucidatypewriter-75dpi
Lucida Sans Typewriter 75dpi pcf fonts
-
nixos-unstable 75dpi-1.0.4
- nixpkgs-unstable 75dpi-1.0.4
- nixos-unstable-small 75dpi-1.0.4
-
nixos-26.05 75dpi-1.0.4
- nixos-26.05-small 75dpi-1.0.4
- nixpkgs-26.05-darwin 75dpi-1.0.4
pkgs.haskellPackages.lucid2-xstatic
Lucid2 helper for XStatic
pkgs.font-bh-lucidatypewriter-100dpi
Lucida Sans Typewriter 100dpi pcf fonts
-
nixos-unstable 100dpi-1.0.4
- nixpkgs-unstable 100dpi-1.0.4
- nixos-unstable-small 100dpi-1.0.4
-
nixos-26.05 100dpi-1.0.4
- nixos-26.05-small 100dpi-1.0.4
- nixpkgs-26.05-darwin 100dpi-1.0.4
pkgs.haskellPackages.cheapskate-lucid
Use cheapskate with Lucid
pkgs.haskellPackages.lucid-foundation
Basic Zurb Foundation API in Lucid
pkgs.xorg.fontbhlucidatypewriter75dpi
None
pkgs.haskellPackages.skylighting-lucid
Lucid support for Skylighting
pkgs.xorg.fontbhlucidatypewriter100dpi
None
pkgs.python312Packages.openwrt-luci-rpc
None
pkgs.python313Packages.openwrt-luci-rpc
Python module for interacting with the OpenWrt Luci RPC interface
pkgs.python314Packages.openwrt-luci-rpc
Python module for interacting with the OpenWrt Luci RPC interface
pkgs.haskellPackages.dani-servant-lucid2
Servant support for lucid2
Package maintainers
-
@jelni jel <nixpkgs@jel.gay>
-
@janTatesa Tatesa Uradnik <taduradnik@gmail.com>
-
@matt-snider Matt Snider <matt.snider@protonmail.com>
-
@RossSmyth Ross Smyth
-
@cherrypiejam Gongqi Huang