Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses
Filter by:
With package: haskellPackages.convexHullNd

Found 2 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-25360
created 3 weeks, 3 days ago
WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in rascals Vex vex allows Object Injection.This issue affects Vex: from n/a through < 1.2.9.

Affected products

vex
  • =<< 1.2.9

Matching in nixpkgs

pkgs.survex

Free Software/Open Source software package for mapping caves

pkgs.vexctl

Tool to create, transform and attest VEX metadata

pkgs.vex-tui

Beautiful, fast, and feature-rich terminal-based Excel and CSV viewer built with Go

Package maintainers

Untriaged
Permalink CVE-2025-53449
8.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
created 4 months ago
WordPress Convex theme <= 1.11 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Convex convex allows PHP Local File Inclusion.This issue affects Convex: from n/a through <= 1.11.

Affected products

convex
  • =<<= 1.11

Matching in nixpkgs