Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses
Filter by:
With package: influxdb2-provision

Found 13 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-18097
5.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 2 weeks, 4 days ago Activity log
  • Created suggestion 2 weeks, 4 days ago
IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.

References

Affected products

Db2
  • =<11.5.9
  • =<12.1.5

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.influxdb2

None

  • nixos-unstable -
    • nixpkgs-unstable
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small
    • nixpkgs-26.05-darwin

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

Untriaged
Permalink CVE-2026-10534
8.4 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 2 weeks, 4 days ago Activity log
  • Created suggestion 2 weeks, 4 days ago
IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

References

Affected products

Db2
  • =<11.5.9
  • =<12.1.5

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.influxdb2

None

  • nixos-unstable -
    • nixpkgs-unstable
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small
    • nixpkgs-26.05-darwin

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

Untriaged
Permalink CVE-2026-16480
4.3 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 2 weeks, 4 days ago Activity log
  • Created suggestion 2 weeks, 4 days ago
IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

References

Affected products

Db2
  • =<11.5.9
  • =<12.1.5

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.influxdb2

None

  • nixos-unstable -
    • nixpkgs-unstable
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small
    • nixpkgs-26.05-darwin

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

Untriaged
Permalink CVE-2026-10543
8.2 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): High (H)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): None (N)
created 2 weeks, 4 days ago Activity log
  • Created suggestion 2 weeks, 4 days ago
IBM® Db2® is vulnerable to privilege escalation with a specially crafted query

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query.

References

Affected products

Db2
  • =<11.5.9
  • =<12.1.5

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.influxdb2

None

  • nixos-unstable -
    • nixpkgs-unstable
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small
    • nixpkgs-26.05-darwin

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

Untriaged
Permalink CVE-2026-18096
3.3 LOW
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): Low (L)
created 2 weeks, 4 days ago Activity log
  • Created suggestion 2 weeks, 4 days ago
IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak

IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.

References

Affected products

Db2
  • ==12.1.5

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.influxdb2

None

  • nixos-unstable -
    • nixpkgs-unstable
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small
    • nixpkgs-26.05-darwin

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

Untriaged
Permalink CVE-2026-10535
8.4 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 1 month ago Activity log
  • Created suggestion 1 month ago
IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.

References

Affected products

Db2
  • =<12.1.4
  • =<11.5.9

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.influxdb2

None

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

pkgs.influxdb2-provision

Small utility to help provisioning influxdb2

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.influxdb2-token-manipulator

Utility program to manipulate influxdb api tokens for declarative setups

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0
Untriaged
Permalink CVE-2026-10695
6.2 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
created 1 month ago Activity log
  • Created suggestion 1 month ago
IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries

IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries.

References

Affected products

Db2
  • =<12.1.4

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.influxdb2

None

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

pkgs.influxdb2-provision

Small utility to help provisioning influxdb2

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.influxdb2-token-manipulator

Utility program to manipulate influxdb api tokens for declarative setups

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0
Untriaged
Permalink CVE-2026-65918
7.1 HIGH
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Passive (P)
  • Vulnerable System Impact Confidentiality (VC): Low (L)
  • Vulnerable System Impact Integrity (VI): None (N)
  • Vulnerable System Impact Availability (VA): High (H)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Passive (P)
  • Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
  • Modified Vulnerable System Impact Integrity (MVI): None (N)
  • Modified Vulnerable System Impact Availability (MVA): High (H)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
created 1 month, 1 week ago Activity log
  • Created suggestion 1 month, 1 week ago
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read

PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.

References

Affected products

vision
  • ==4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed
  • =<0.28.0

Matching in nixpkgs

pkgs.autorevision

Extracts revision metadata from your VCS repository

  • nixos-unstable 1.22
    • nixpkgs-unstable 1.22
    • nixos-unstable-small 1.22
  • nixos-26.05 1.22
    • nixos-26.05-small 1.22
    • nixpkgs-26.05-darwin 1.22

pkgs.rocmPackages.mivisionx

Set of comprehensive computer vision and machine intelligence libraries, utilities, and applications

pkgs.gnomeExtensions.my-vision

MyVision is a fork of Display Configuration Switcher that has been thoughtfully and substantially enhanced. It allows users to store profiles that are directly bound to specific display devices. This approach eliminates the need for redundant profiles in scenarios where video outputs are detected or ordered unpredictably.

  • nixos-unstable 12
    • nixpkgs-unstable 12
    • nixos-unstable-small 12
  • nixos-26.05 12
    • nixos-26.05-small 12
    • nixpkgs-26.05-darwin 12
Untriaged
Permalink CVE-2026-7771
5.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
created 1 month, 1 week ago Activity log
  • Created suggestion 1 month, 1 week ago
IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.

References

Affected products

Db2
  • =<12.1.4
  • =<11.5.9

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.influxdb2

None

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

pkgs.influxdb2-provision

Small utility to help provisioning influxdb2

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.influxdb2-token-manipulator

Utility program to manipulate influxdb api tokens for declarative setups

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0
Untriaged
Permalink CVE-2026-9762
7.8 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 1 month, 1 week ago Activity log
  • Created suggestion 1 month, 1 week ago
IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

References

Affected products

Db2
  • =<12.1.4
  • =<11.5.9

Matching in nixpkgs

pkgs.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.influxdb2

None

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

pkgs.influxdb2-provision

Small utility to help provisioning influxdb2

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0

pkgs.python313Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.python314Packages.pdb2pqr

Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules

  • nixos-unstable -
    • nixos-unstable-small 3.7.1
  • nixos-26.05 -
    • nixos-26.05-small 3.7.1

pkgs.influxdb2-token-manipulator

Utility program to manipulate influxdb api tokens for declarative setups

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0