Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2026-13240

created 4 days, 9 hours ago Activity log

Created suggestion 4 days, 9 hours ago

Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0.

References

https://www.drupal.org/sa-contrib-2026-060

Affected products

Paragraphs

<1.21.0

Matching in nixpkgs

pkgs.python313Packages.paragraphs

Module to incorporate long strings

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-26.05 1.0.1
- nixos-26.05-small 1.0.1
- nixpkgs-26.05-darwin 1.0.1

pkgs.python314Packages.paragraphs

Module to incorporate long strings

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-26.05 1.0.1
- nixos-26.05-small 1.0.1
- nixpkgs-26.05-darwin 1.0.1

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>