Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses

Filter by:

With package: python314Packages.paypal-checkout-serversdk

Found 1 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-27735

created 1 month, 3 weeks ago

mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in the files argument were within the repository boundaries. Because the tool used GitPython's repo.index.add() rather than the Git CLI, relative paths containing `../` sequences that resolve outside the repository were accepted and staged into the Git index. Users are advised to upgrade to 2026.1.14 or newer to remediate this issue.

References

https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-vjqx-cfc4-9h6v x_refsource_CONFIRM
https://github.com/modelcontextprotocol/servers/pull/3164 x_refsource_MISC

Affected products

servers

==< 2026.1.14

Matching in nixpkgs

pkgs.serverspec

RSpec tests for your servers configured by CFEngine, Puppet, Ansible, Itamae or anything else

nixos-unstable 2.42.2
- nixpkgs-unstable 2.42.2
- nixos-unstable-small 2.42.2
nixos-25.11 2.42.2
- nixos-25.11-small 2.42.2
- nixpkgs-25.11-darwin 2.42.2

pkgs.vscode-langservers-extracted

HTML/CSS/JSON/ESLint language servers extracted from vscode

nixos-unstable 4.10.0
- nixpkgs-unstable 4.10.0
- nixos-unstable-small 4.10.0
nixos-25.11 4.10.0
- nixos-25.11-small 4.10.0
- nixpkgs-25.11-darwin 4.10.0

pkgs.haskellPackages.serversession

Secure, modular server-side sessions

nixos-unstable 1.0.3
- nixpkgs-unstable 1.0.3
- nixos-unstable-small 1.0.3
nixos-25.11 1.0.3
- nixos-25.11-small 1.0.3
- nixpkgs-25.11-darwin 1.0.3

pkgs.python312Packages.pytest-mockservers

Set of fixtures to test your requests to HTTP/UDP servers

nixos-25.11 0.6.0
- nixos-25.11-small 0.6.0
- nixpkgs-25.11-darwin 0.6.0

pkgs.python313Packages.pytest-mockservers

Set of fixtures to test your requests to HTTP/UDP servers

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-25.11 0.6.0
- nixos-25.11-small 0.6.0
- nixpkgs-25.11-darwin 0.6.0

pkgs.python314Packages.pytest-mockservers

Set of fixtures to test your requests to HTTP/UDP servers

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0

pkgs.haskellPackages.serversession-frontend-wai

wai-session bindings for serversession

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-25.11 1.0.1
- nixos-25.11-small 1.0.1
- nixpkgs-25.11-darwin 1.0.1

pkgs.haskellPackages.serversession-backend-redis

Storage backend for serversession using Redis

nixos-unstable 1.0.5
- nixpkgs-unstable 1.0.5
- nixos-unstable-small 1.0.5
nixos-25.11 1.0.5
- nixos-25.11-small 1.0.5
- nixpkgs-25.11-darwin 1.0.5

pkgs.haskellPackages.serversession-frontend-snap

Snap bindings for serversession

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-25.11 1.0.1
- nixos-25.11-small 1.0.1
- nixpkgs-25.11-darwin 1.0.1

pkgs.python312Packages.paypal-checkout-serversdk

Python SDK for Checkout RESTful APIs

nixos-25.11 1.0.1
- nixos-25.11-small 1.0.1
- nixpkgs-25.11-darwin 1.0.1

pkgs.python313Packages.paypal-checkout-serversdk

Python SDK for Checkout RESTful APIs

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-25.11 1.0.1
- nixos-25.11-small 1.0.1
- nixpkgs-25.11-darwin 1.0.1

pkgs.python314Packages.paypal-checkout-serversdk

Python SDK for Checkout RESTful APIs

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1

pkgs.haskellPackages.serversession-frontend-yesod

Yesod bindings for serversession

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-25.11 1.0.1
- nixos-25.11-small 1.0.1
- nixpkgs-25.11-darwin 1.0.1

pkgs.haskellPackages.serversession-backend-acid-state

Storage backend for serversession using acid-state

nixos-unstable 1.0.5
- nixpkgs-unstable 1.0.5
- nixos-unstable-small 1.0.5
nixos-25.11 1.0.5
- nixos-25.11-small 1.0.5
- nixpkgs-25.11-darwin 1.0.5

pkgs.python312Packages.azure-mgmt-mysqlflexibleservers

Microsoft Azure Mysqlflexibleservers Management Client Library for Python

nixos-25.11 1.0.0b3
- nixos-25.11-small 1.0.0b3
- nixpkgs-25.11-darwin 1.0.0b3

pkgs.python313Packages.azure-mgmt-mysqlflexibleservers

Microsoft Azure Mysqlflexibleservers Management Client Library for Python

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0b3
- nixos-25.11-small 1.0.0b3
- nixpkgs-25.11-darwin 1.0.0b3

pkgs.python314Packages.azure-mgmt-mysqlflexibleservers

Microsoft Azure Mysqlflexibleservers Management Client Library for Python

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0

pkgs.python312Packages.azure-mgmt-postgresqlflexibleservers

Microsoft Azure Postgresqlflexibleservers Management Client Library for Python

nixos-25.11 1.1.0
- nixos-25.11-small 1.1.0
- nixpkgs-25.11-darwin 1.1.0

pkgs.python313Packages.azure-mgmt-postgresqlflexibleservers

Microsoft Azure Postgresqlflexibleservers Management Client Library for Python

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0
nixos-25.11 1.1.0
- nixos-25.11-small 1.1.0
- nixpkgs-25.11-darwin 1.1.0

pkgs.python314Packages.azure-mgmt-postgresqlflexibleservers

Microsoft Azure Postgresqlflexibleservers Management Client Library for Python

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0

Package maintainers

@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@dylanmtaylor Dylan Taylor <dylan@dylanmtaylor.com>
@Lord-Valen Lord Valen

1