Nixpkgs security tracker
4.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
Insufficient validation of untrusted input in Cast in Google Chrome …
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
References
Affected products
- <151.0.7922.72
Matching in nixpkgs
pkgs.netflix
Open Netflix in Google Chrome app mode
pkgs.chromedriver
WebDriver server for running Selenium tests on Chrome
-
nixos-unstable -
- nixos-unstable-small 150.0.7871.186
-
nixos-26.05 -
- nixos-26.05-small 150.0.7871.186
pkgs.mkchromecast
Cast macOS and Linux Audio/Video to your Google Cast and Sonos Devices
-
nixos-unstable -
- nixos-unstable-small 2025-12-21
-
nixos-26.05 -
- nixos-26.05-small 2025-12-21
pkgs.chrome-export
Scripts to save Google Chrome's bookmarks and history as HTML bookmarks files
pkgs.go-chromecast
CLI for Google Chromecast, Home devices and Cast Groups
pkgs.google-chrome
Freeware web browser developed by Google
-
nixos-unstable -
- nixos-unstable-small 150.0.7871.186
-
nixos-26.05 -
- nixos-26.05-small 150.0.7871.186
pkgs.xf86videoopenchrome
None
pkgs.chrome-token-signing
Chrome and Firefox extension for signing with your eID on the web
pkgs.chrome-pak-customizer
Simple batch tool to customize pak files in chrome or chromium-based browser
-
nixos-unstable -
- nixos-unstable-small 2.0-unstable-2021-06-24
-
nixos-26.05 -
- nixos-26.05-small 2.0-unstable-2021-06-24
pkgs.electron-chromedriver
WebDriver server for running Selenium tests on Chrome
pkgs.xf86-video-openchrome
None
pkgs.undetected-chromedriver
Custom Selenium ChromeDriver that passes all bot mitigation systems
-
nixos-unstable -
- nixos-unstable-small 150.0.7871.186
-
nixos-26.05 -
- nixos-26.05-small 150.0.7871.186
pkgs.electron-chromedriver_38
None
pkgs.electron-chromedriver_39
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_40
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_41
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_42
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_43
WebDriver server for running Selenium tests on Chrome
pkgs.ocamlPackages.chrome-trace
Chrome trace event generation library
pkgs.noto-fonts-monochrome-emoji
Monochrome emoji font
pkgs.python313Packages.pychromecast
Library for Python to communicate with the Google Chromecast
pkgs.python314Packages.pychromecast
Library for Python to communicate with the Google Chromecast
pkgs.gnomeExtensions.monochrome-toggle
Quick Settings toggle for monochrome, desatured or sepia tinted display. Based on Achroma.
-
nixos-unstable -
- nixos-unstable-small 1
pkgs.ocamlPackages_latest.chrome-trace
Chrome trace event generation library
pkgs.python313Packages.undetected-chromedriver
Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems
pkgs.python314Packages.undetected-chromedriver
Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems
pkgs.grafanaPlugins.ventura-psychrometric-panel
Grafana plugin to display air conditions on a psychrometric chart
Package maintainers
-
@bdesham Benjamin Esham <benjamin@esham.io>
-
@UlyssesZh Ulysses Zhan <ulysseszhan@gmail.com>
-
@mmahut Marek Mahut <marek.mahut@gmail.com>
-
@networkException networkException <nix@nwex.de>
-
@emilylange Emily Lange <nix@emilylange.de>
-
@TomaSajt TomaSajt
-
@teutat3s teutat3s <teutates@mailbox.org>
-
@yayayayaka Yaya <github@uwu.is>
-
@liam-murphy14 Liam Murphy <liam.murphy137@gmail.com>
-
@zi3m5f zi3m5f <k7n3o3a6f@mozmail.com>
-
@mdaniels5757 Michael Daniels <nix@mdaniels.me>
-
@iedame Rafael Ieda <git@ieda.me>
-
@nagisa Simonas Kazlauskas <nixpkgs@kazlauskas.me>
-
@Shou Benedict Aas <x+g@shou.io>
-
@roberth Robert Hensing <nixpkgs@roberthensing.nl>
-
@nicoonoclaste nicoo <nicoo@debian.org>
-
@honnip Jung seungwoo <me@honnip.page>