Nixpkgs security tracker

Untriaged

Permalink CVE-2026-28041

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Grit grit allows PHP Local File Inclusion.This issue affects Grit: from n/a through <= 1.0.1.

References

https://patchstack.com/database/Wordpress/Theme/grit/vulnerability/wordpress-gr… vdb-entry

Affected products

grit

=<<= 1.0.1

Matching in nixpkgs

pkgs.grit

Multitree-based personal task manager

nixos-unstable 0.3.0
- nixpkgs-unstable 0.3.0
- nixos-unstable-small 0.3.0
nixos-25.11 0.3.0
- nixos-25.11-small 0.3.0
- nixpkgs-25.11-darwin 0.3.0

pkgs.integrity-scrub

Scrub dm-integrity devices

nixos-unstable 0.6.6
- nixpkgs-unstable 0.6.6
- nixos-unstable-small 0.6.6
nixos-25.11 0.6.6
- nixos-25.11-small 0.6.6
- nixpkgs-25.11-darwin 0.6.6

pkgs.restic-integrity

CLI tool to check the integrity of a restic repository without unlocking it

nixos-unstable 1.4.0
- nixpkgs-unstable 1.4.0
- nixos-unstable-small 1.4.0
nixos-25.11 1.4.0
- nixos-25.11-small 1.4.0
- nixpkgs-25.11-darwin 1.4.0

Package maintainers

@illdefined Mikael Voss <mvs@nya.yt>
@networkException networkException <nix@nwex.de>

Suggestions search