Nixpkgs security tracker
5.9 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
Server-controlled `__next` URL is not checking cross-origin
A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on Availability.
References
Affected products
- ==pyodata (pip) < 1.11.2
Matching in nixpkgs
pkgs.uctodata
Rule-based tokenizer for natural language
pkgs.quake3demodata
Demo of Quake 3 Arena, a classic first-person shooter
pkgs.libsForQt5.libiodata
Library for reading and writing simple structured data
pkgs.kdePackages.libiodata
Library for reading and writing simple structured data
pkgs.qt6Packages.libiodata
Library for reading and writing simple structured data
pkgs.python313Packages.iodata
Python library for reading, writing, and converting computational chemistry file formats and generating input files
pkgs.python314Packages.iodata
Python library for reading, writing, and converting computational chemistry file formats and generating input files
pkgs.python313Packages.microdata
Library for extracting html microdata
pkgs.python314Packages.microdata
Library for extracting html microdata
pkgs.haskellPackages.handa-geodata
Geographic and Geometric Data
pkgs.python313Packages.geodatasets
Spatial data examples
pkgs.python314Packages.geodatasets
Spatial data examples
pkgs.python313Packages.cryptodatahub
Repository of cryptography-related data
pkgs.python314Packages.cryptodatahub
Repository of cryptography-related data
pkgs.python313Packages.swisshydrodata
Python client to get data from the Swiss federal Office for Environment FEON
pkgs.python314Packages.swisshydrodata
Python client to get data from the Swiss federal Office for Environment FEON
pkgs.haskellPackages.dimensional-codata
CODATA Recommended Physical Constants with Dimensional Types
-
nixos-unstable 2014.0.0.3
- nixpkgs-unstable 2014.0.0.3
- nixos-unstable-small 2014.0.0.3
-
nixos-26.05 2014.0.0.3
- nixos-26.05-small 2014.0.0.3
- nixpkgs-26.05-darwin 2014.0.0.3
Package maintainers
-
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@ethancedwards8 Ethan Carter Edwards <ethan@ethancedwards.com>
-
@eljamm Fedi Jamoussi <fedi.jamoussi@protonmail.ch>
-
@phanirithvij Phani Rithvij <phanirithvij2000@gmail.com>
-
@nialov Nikolas Ovaskainen <nikolasovaskainen@gmail.com>
-
@autra Augustin Trancart <augustin.trancart@gmail.com>
-
@imincik Ivan Mincik <ivan.mincik@gmail.com>
-
@willcohen Will Cohen
-
@nh2 Niklas Hambüchen <mail@nh2.me>
-
@l0b0 Victor Engmark <victor@engmark.name>
-
@sikmir Nikolay Korotkiy <sikmir@disroot.org>
-
@sheepforce Phillip Seeber <phillip.seeber@googlemail.com>
-
@ambroisie Bruno BELANYI <bruno.nixpkgs@belanyi.fr>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@roberth Robert Hensing <nixpkgs@roberthensing.nl>