Nixpkgs security tracker
8.8 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
Activity log
- Created suggestion
Apioo Fusio - Remote Code Execution
A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-list bypass. The sandbox allow-list permits functions that transitively invoke system(), enabling a developer to escape the sandbox and gain OS command execution on the server. An attacker with a Developer-role account can achieve full server compromise.
References
Affected products
- =<8.8.3
Matching in nixpkgs
pkgs.datafusion-cli
CLI for Apache Arrow DataFusion
pkgs.lxgw-fusionkai
Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One
pkgs.fusionInventory
FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX
pkgs.finalfusion-utils
Utility for converting, quantizing, and querying word embeddings
pkgs.stable-diffusion-cpp
Stable Diffusion inference in pure C/C++
-
nixos-unstable 652-92dc726
- nixpkgs-unstable 741-484baa4
- nixos-unstable-small 797-5ef4a75
-
nixos-26.05 625-f683c88
- nixos-26.05-small 625-f683c88
- nixpkgs-26.05-darwin 625-f683c88
pkgs.fusioninventory-agent
FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX
pkgs.stable-diffusion-cpp-cuda
Stable Diffusion inference in pure C/C++
-
nixos-unstable 652-92dc726
- nixpkgs-unstable 741-484baa4
- nixos-unstable-small 797-5ef4a75
-
nixos-26.05 625-f683c88
- nixos-26.05-small 625-f683c88
- nixpkgs-26.05-darwin 625-f683c88
pkgs.stable-diffusion-cpp-rocm
Stable Diffusion inference in pure C/C++
-
nixos-unstable 652-92dc726
- nixpkgs-unstable 741-484baa4
- nixos-unstable-small 797-5ef4a75
-
nixos-26.05 625-f683c88
- nixos-26.05-small 625-f683c88
- nixpkgs-26.05-darwin 625-f683c88
pkgs.stable-diffusion-cpp-vulkan
Stable Diffusion inference in pure C/C++
-
nixos-unstable 652-92dc726
- nixpkgs-unstable 741-484baa4
- nixos-unstable-small 797-5ef4a75
-
nixos-26.05 625-f683c88
- nixos-26.05-small 625-f683c88
- nixpkgs-26.05-darwin 625-f683c88
pkgs.python313Packages.datafusion
Extensible query execution framework
pkgs.python313Packages.vegafusion
Core tools for using VegaFusion from Python
pkgs.python314Packages.datafusion
Extensible query execution framework
pkgs.python314Packages.vegafusion
Core tools for using VegaFusion from Python
pkgs.haskellPackages.fusion-plugin
GHC plugin to make stream fusion more predictable
pkgs.pkgsRocm.stable-diffusion-cpp
Stable Diffusion inference in pure C/C++
-
nixos-unstable 652-92dc726
- nixpkgs-unstable 741-484baa4
- nixos-unstable-small 797-5ef4a75
-
nixos-26.05 625-f683c88
- nixos-26.05-small 625-f683c88
- nixpkgs-26.05-darwin 625-f683c88
pkgs.python313Packages.finalfusion
Python module for using finalfusion, word2vec, and fastText word embeddings
pkgs.python313Packages.k-diffusion
Karras et al. (2022) diffusion models for PyTorch
-
nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
-
nixos-26.05 0.1.1.post1
- nixos-26.05-small 0.1.1.post1
- nixpkgs-26.05-darwin 0.1.1.post1
pkgs.python314Packages.finalfusion
Python module for using finalfusion, word2vec, and fastText word embeddings
pkgs.python314Packages.k-diffusion
Karras et al. (2022) diffusion models for PyTorch
-
nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
-
nixos-26.05 0.1.1.post1
- nixos-26.05-small 0.1.1.post1
- nixpkgs-26.05-darwin 0.1.1.post1
pkgs.haskellPackages.gogol-datafusion
Google Cloud Data Fusion SDK
pkgs.haskellPackages.gogol-fusiontables
Google Fusion Tables SDK
pkgs.haskellPackages.fusion-plugin-types
Types for the fusion-plugin package
pkgs.pkgsRocm.python3Packages.k-diffusion
Karras et al. (2022) diffusion models for PyTorch
-
nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
-
nixos-26.05 0.1.1.post1
- nixos-26.05-small 0.1.1.post1
- nixpkgs-26.05-darwin 0.1.1.post1
pkgs.pkgsRocm.stable-diffusion-cpp-vulkan
Stable Diffusion inference in pure C/C++
-
nixos-unstable 652-92dc726
- nixpkgs-unstable 741-484baa4
- nixos-unstable-small 797-5ef4a75
-
nixos-26.05 625-f683c88
- nixos-26.05-small 625-f683c88
- nixpkgs-26.05-darwin 625-f683c88
pkgs.chickenPackages_5.chickenEggs.fusion-arrays
Fusion arrays.
Package maintainers
-
@happysalada Raphael Megzari <raphael@megzari.com>
-
@phile314 Philipp Hausmann <nix@314.ch>
-
@hellodword hellodword
-
@Mic92 Jörg Thalheim <joerg@thalheim.io>
-
@adrlau Adrian Gunnar Lauterer <adrian@lauterer.it>
-
@cpcloud Phillip Cloud
-
@wariuccio Wariuccio