Nixpkgs security tracker

Permalink CVE-2025-67935

8.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 2 months, 4 weeks ago

WordPress Optimize theme < 2.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allows PHP Local File Inclusion.This issue affects Optimize: from n/a through < 2.4.

References

Affected products

optimizewp

=<< 2.4

Matching in nixpkgs

pkgs.pngoptimizer

PNG optimizer and converter

nixos-unstable 2.7
- nixpkgs-unstable 2.7
- nixos-unstable-small 2.7
nixos-25.11 2.7
- nixpkgs-25.11-darwin 2.7

pkgs.meshoptimizer

Mesh optimization library that makes meshes smaller and faster to render

nixos-unstable 0.24
- nixpkgs-unstable 0.24
- nixos-unstable-small 0.24
nixos-25.11 0.25
- nixpkgs-25.11-darwin 0.25

pkgs.openorbitaloptimizer

Common orbital optimisation algorithms for quantum chemistry

nixos-25.11 0.2.0
- nixpkgs-25.11-darwin 0.2.0

pkgs.elmPackages.elm-optimize-level-2

Second level of optimization for the Javascript that the Elm Compiler produces

nixos-unstable 2-0.3.5
- nixpkgs-unstable 2-0.3.5
- nixos-unstable-small 2-0.3.5
nixos-25.11 2-0.3.4-unstable-2022-04-05
- nixpkgs-25.11-darwin 2-0.3.4-unstable-2022-04-05

pkgs.akkuPackages.cyclone-iset-optimize

None

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.haskellPackages.amazonka-compute-optimizer

Amazon Compute Optimizer SDK

nixos-unstable 2.0
- nixpkgs-unstable 2.0
- nixos-unstable-small 2.0
nixos-25.11 2.0-unstable-2025-04-16
- nixpkgs-25.11-darwin 2.0-unstable-2025-04-16