Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

With package: mdctags

Found 1 matching suggestions

View:
Compact
Detailed
Permalink CVE-2026-2641
3.3 LOW
  • CVSS version: 3.1
  • Attack vector (AV):
  • Attack complexity (AC):
  • Privileges required (PR):
  • User interaction (UI):
  • Scope (S):
  • Confidentiality impact (C):
  • Integrity impact (I):
  • Availability impact (A):
created 2 months ago Activity log
  • Created suggestion
universal-ctags V Language v.c parseExprList recursion

A weakness has been identified in universal-ctags ctags up to 6.2.1. The affected element is the function parseExpression/parseExprList of the file parsers/v.c of the component V Language Parser. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

ctags
  • ==6.2.0
  • ==6.2.1

Matching in nixpkgs

pkgs.ctags

Tool for fast source code browsing (exuberant ctags)

  • nixos-unstable 816
    • nixpkgs-unstable 816
    • nixos-unstable-small 816
  • nixos-25.11 816
    • nixos-25.11-small 816
    • nixpkgs-25.11-darwin 816

pkgs.ctags-lsp

LSP implementation using universal-ctags as backend

Package maintainers