Nixpkgs security tracker

Untriaged

Permalink CVE-2026-22455

created 1 month, 2 weeks ago Activity log

Created suggestion 1 month, 2 weeks ago

WordPress Thebe theme <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree Thebe thebe allows Reflected XSS.This issue affects Thebe: from n/a through <= 1.3.0.

References

https://patchstack.com/database/Wordpress/Theme/thebe/vulnerability/wordpress-t… vdb-entry

Affected products

thebe

=<<= 1.3.0

Matching in nixpkgs

pkgs.python312Packages.sphinx-thebe

Integrate interactive code blocks into your documentation with Thebe and Binder

nixos-25.11 0.3.1
- nixos-25.11-small 0.3.1
- nixpkgs-25.11-darwin 0.3.1

pkgs.python313Packages.sphinx-thebe

Integrate interactive code blocks into your documentation with Thebe and Binder

nixos-unstable 0.3.1
- nixpkgs-unstable 0.3.1
- nixos-unstable-small 0.3.1
nixos-25.11 0.3.1
- nixos-25.11-small 0.3.1
- nixpkgs-25.11-darwin 0.3.1

pkgs.python314Packages.sphinx-thebe

Integrate interactive code blocks into your documentation with Thebe and Binder

nixos-unstable 0.3.1
- nixpkgs-unstable 0.3.1
- nixos-unstable-small 0.3.1

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.python312Packages.sphinx-thebe

pkgs.python313Packages.sphinx-thebe

pkgs.python314Packages.sphinx-thebe