Nixpkgs security tracker

Permalink CVE-2025-58928

8.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 4 months ago Activity log

Created suggestion 4 months ago

WordPress Heart theme <= 1.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Heart heart allows PHP Local File Inclusion.This issue affects Heart: from n/a through <= 1.8.

References

Affected products

heart

=<<= 1.8

Matching in nixpkgs

pkgs.heartbeat7

Lightweight shipper for uptime monitoring

nixos-unstable 7.17.27
- nixpkgs-unstable 7.17.27
- nixos-unstable-small 7.17.27
nixos-25.11 7.17.27
- nixpkgs-25.11-darwin 7.17.27

pkgs.anytype-heart

Shared library for Anytype clients

nixos-unstable 0.40.21
- nixpkgs-unstable 0.40.21
- nixos-unstable-small 0.40.21
nixos-25.11 0.44.5
- nixpkgs-25.11-darwin 0.44.5

pkgs.emacsPackages.metalheart-theme

None

nixos-unstable 20160710.641
- nixpkgs-unstable 20160710.641
- nixos-unstable-small 20160710.641

Package maintainers

@fadenb Tristan Helmich <tristan.helmich+nixos@gmail.com>
@basvandijk Bas van Dijk <v.dijk.bas@gmail.com>
@dfithian Daniel Fithian <daniel.m.fithian@gmail.com>
@autrimpo Michal Koutenský <michal@koutensky.net>
@adda0 David Chocholatý <chocholaty.david@protonmail.com>

Suggestions search