Nixpkgs security tracker

Untriaged

Permalink CVE-2026-54745

10.0 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 day, 4 hours ago Activity log

Created suggestion 1 day, 4 hours ago

Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /_proxy/ route in frontend/server/proxy-middleware.ts. The _routePathWithReferer() function accepts an arbitrary attacker-controlled HTTP or HTTPS target and passes its origin to createProxyMiddleware without a host allowlist or filtering for loopback, link-local, RFC1918, or cluster-local addresses. The route remains outside the authorization middleware when ENABLE_AUTHZ=true and is reachable through /apis/v1beta1/_proxy/, /apis/v2beta1/_proxy/, /pipeline/apis/v1beta1/_proxy/, and /pipeline/apis/v2beta1/_proxy/, including through a crafted Referer header. Requests can forward attacker-controlled methods, headers such as Authorization, Cookie, and X-Forwarded-For, and POST bodies to reachable internal services, while returning the upstream response to the unauthenticated client. This can expose cloud metadata credentials, Kubernetes or service APIs, and other cluster-internal endpoints to unauthorized read or modification. This issue is fixed in version 2.17.0.

References

https://github.com/kubeflow/pipelines/security/advisories/GHSA-gqww-5pj5-8fq7 x_refsource_CONFIRM
https://github.com/kubeflow/pipelines/pull/13511 x_refsource_MISC
https://github.com/kubeflow/pipelines/commit/a35f97aa4c17b25572369e5022546ab4421bdbdd x_refsource_MISC
https://github.com/kubeflow/pipelines/releases/tag/2.17.0 x_refsource_MISC

Affected products

pipelines

==< 2.17.0

Matching in nixpkgs

pkgs.prometheus-gitlab-ci-pipelines-exporter

Prometheus / OpenMetrics exporter for GitLab CI pipelines insights

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-26.05 0.6.0
- nixos-26.05-small 0.6.0
- nixpkgs-26.05-darwin 0.6.0

pkgs.haskellPackages.amazonka-chime-sdk-media-pipelines

Amazon Chime SDK Media Pipelines SDK

nixos-unstable 2.0-unstable-2025-04-16
- nixpkgs-unstable 2.0-unstable-2025-04-16
- nixos-unstable-small 2.0-unstable-2025-04-16
nixos-26.05 2.0-unstable-2025-04-16
- nixos-26.05-small 2.0-unstable-2025-04-16
- nixpkgs-26.05-darwin 2.0-unstable-2025-04-16

pkgs.python313Packages.mypy-boto3-chime-sdk-media-pipelines

Type annotations for boto3 chime-sdk-media-pipelines

nixos-unstable 1.43.0
- nixpkgs-unstable 1.43.0
- nixos-unstable-small 1.43.0
nixos-26.05 1.43.0
- nixos-26.05-small 1.43.0
- nixpkgs-26.05-darwin 1.43.0

pkgs.python314Packages.mypy-boto3-chime-sdk-media-pipelines

Type annotations for boto3 chime-sdk-media-pipelines

nixos-unstable 1.43.0
- nixpkgs-unstable 1.43.0
- nixos-unstable-small 1.43.0
nixos-26.05 1.43.0
- nixos-26.05-small 1.43.0
- nixpkgs-26.05-darwin 1.43.0

pkgs.python313Packages.types-aiobotocore-chime-sdk-media-pipelines

Type annotations for aiobotocore chime-sdk-media-pipelines

nixos-unstable 3.7.0
- nixpkgs-unstable 3.7.0
- nixos-unstable-small 3.9.0
nixos-26.05 3.7.0
- nixos-26.05-small 3.7.0
- nixpkgs-26.05-darwin 3.7.0

pkgs.python314Packages.types-aiobotocore-chime-sdk-media-pipelines

Type annotations for aiobotocore chime-sdk-media-pipelines

nixos-unstable -
- nixos-unstable-small 3.9.0

Package maintainers

@mvisonneau Maxime VISONNEAU <maxime@visonneau.fr>
@mmahut Marek Mahut <marek.mahut@gmail.com>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-40938

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 4 months, 1 week ago by @fricklerhandwerk Activity log

Created suggestion 4 months, 1 week ago
@fricklerhandwerk accepted 4 months, 1 week ago
@fricklerhandwerk dismissed (not in Nixpkgs) 4 months, 1 week ago

Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. From 1.0.0 to before 1.11.0, the git resolver's revision parameter is passed directly as a positional argument to git fetch without any validation that it does not begin with a - character. Because git parses flags from mixed positional arguments, an attacker can inject arbitrary git fetch flags such as --upload-pack=<binary>. Combined with the validateRepoURL function explicitly permitting URLs that begin with / (local filesystem paths), a tenant who can submit ResolutionRequest objects can chain these two behaviors to execute an arbitrary binary on the resolver pod. The tekton-pipelines-resolvers ServiceAccount holds cluster-wide get/list/watch on all Secrets, so code execution on the resolver pod enables full cluster-wide secret exfiltration. This vulnerability is fixed in 1.11.1.