Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses
Filter by:
With package: kube-router

Found 2 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2025-15101
created 3 weeks, 2 days ago
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in …

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Web management interface of certain ASUS router models. This vulnerability potentially allows actions to be performed with the existing privileges of an authenticated user on the affected device, including the ability to execute system commands through unintended mechanisms. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

References

Affected products

Router
  • ==3.0.0.6_102

Matching in nixpkgs

pkgs.router

Configurable, high-performance routing runtime for Apollo Federation

pkgs.kube-router

All-in-one router, firewall and service proxy for Kubernetes

pkgs.linux-router

Set Linux as router / Wifi hotspot / proxy in one command

pkgs.invidious-router

Go application that routes requests to different Invidious instances based on their health status and (optional) response time

  • nixos-unstable 1.2
    • nixpkgs-unstable 1.2
    • nixos-unstable-small 1.2
  • nixos-25.11 1.2
    • nixos-25.11-small 1.2
    • nixpkgs-25.11-darwin 1.2

Package maintainers

Untriaged
Permalink CVE-2026-32254
7.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): LOW
  • Availability impact (A): HIGH
created 1 month ago
Kube-router Proxy Module Blindly Trusts ExternalIPs/LoadBalancer IPs Enabling Cluster-Wide Traffic Hijacking and DNS DoS

Kube-router is a turnkey solution for Kubernetes networking. Prior to version 2.8.0, Kube-router's proxy module does not validate externalIPs or loadBalancer IPs before programming them into the node's network configuration. Version 2.8.0 contains a patch for the issue. Available workarounds include enabling DenyServiceExternalIPs feature gate, deploying admission policy, restricting service creation RBAC, monitoring service changes, and applying BGP prefix filtering.

Affected products

kube-router
  • ==< 2.8.0

Matching in nixpkgs

pkgs.kube-router

All-in-one router, firewall and service proxy for Kubernetes

Package maintainers