Nixpkgs security tracker
3.3 LOW
- CVSS version: 3.1
- Attack vector (AV):
- Attack complexity (AC):
- Privileges required (PR):
- User interaction (UI):
- Scope (S):
- Confidentiality impact (C):
- Integrity impact (I):
- Availability impact (A):
berry-lang berry be_lexer.c scan_string out-of-bounds
A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the file src/be_lexer.c. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Patch name: 7149c59a39ba44feca261b12f06089f265fec176. Applying a patch is the recommended action to fix this issue.
References
-
-
-
Submit #758872 | berry-lang berry 7af8289 Buffer Overflow third-party-advisory
-
https://github.com/berry-lang/berry/issues/509 issue-tracking
-
Affected products
- ==1.0
- ==1.1.0
Matching in nixpkgs
pkgs.berry
Healthy, bite-sized window manager
pkgs.amiberry
Optimized Amiga emulator for Linux/macOS
pkgs.blueberry
Bluetooth configuration tool
pkgs.strawberry
Music player and music collection organizer
pkgs.yarn-berry
Fast, reliable, and secure dependency management
pkgs.yarn-berry_3
Fast, reliable, and secure dependency management
pkgs.yarn-berry_4
Fast, reliable, and secure dependency management
pkgs.raspberrypifw
Firmware for the Raspberry Pi board
-
nixos-unstable 1.20250430
- nixpkgs-unstable 1.20250430
- nixos-unstable-small 1.20250430
-
nixos-25.11 1.20250430
- nixos-25.11-small 1.20250430
- nixpkgs-25.11-darwin 1.20250430
pkgs.libraspberrypi
Userland tools & libraries for interfacing with Raspberry Pi hardware
-
nixos-unstable 0-unstable-2024-12-23
- nixpkgs-unstable 0-unstable-2024-12-23
- nixos-unstable-small 0-unstable-2024-12-23
-
nixos-25.11 0-unstable-2024-12-23
- nixos-25.11-small 0-unstable-2024-12-23
- nixpkgs-25.11-darwin 0-unstable-2024-12-23
pkgs.strawberry-qt6
Music player and music collection organizer
pkgs.device-tree_rpi
DTBs for the Raspberry Pi
-
nixos-unstable 1.20250430
- nixpkgs-unstable 1.20250430
- nixos-unstable-small 1.20250430
-
nixos-25.11 1.20250430
- nixos-25.11-small 1.20250430
- nixpkgs-25.11-darwin 1.20250430
pkgs.raspberrypi-eeprom
Installation scripts and binaries for the closed sourced Raspberry Pi 4 and 5 bootloader EEPROMs
-
nixos-unstable 2026.01.09-2711
- nixpkgs-unstable 2026.01.09-2711
- nixos-unstable-small 2026.01.09-2711
-
nixos-25.11 2025.11.05-2712
- nixos-25.11-small 2025.11.05-2712
- nixpkgs-25.11-darwin 2025.11.05-2712
pkgs.raspberrypi-armstubs
Firmware related ARM stubs for the Raspberry Pi
-
nixos-unstable 2022-07-11
- nixpkgs-unstable 2022-07-11
- nixos-unstable-small 2022-07-11
-
nixos-25.11 2022-07-11
- nixos-25.11-small 2022-07-11
- nixpkgs-25.11-darwin 2022-07-11
pkgs.haskellPackages.huckleberry
Haskell IOT on Intel Edison and other Linux computers
pkgs.raspberrypiWirelessFirmware
Firmware for builtin Wifi/Bluetooth devices in the Raspberry Pi 3+ and Zero W
-
nixos-unstable 0-unstable-2025-04-08
- nixpkgs-unstable 0-unstable-2025-04-08
- nixos-unstable-small 0-unstable-2025-04-08
-
nixos-25.11 0-unstable-2025-04-08
- nixos-25.11-small 0-unstable-2025-04-08
- nixpkgs-25.11-darwin 0-unstable-2025-04-08
pkgs.python312Packages.strawberry-django
Strawberry GraphQL Django extension
pkgs.python313Packages.strawberry-django
Strawberry GraphQL Django extension
pkgs.python312Packages.strawberry-graphql
GraphQL library for Python that leverages type annotations
pkgs.python313Packages.strawberry-graphql
GraphQL library for Python that leverages type annotations
pkgs.home-assistant-component-tests.raspberry_pi
Open source home automation that puts local control and privacy first
pkgs.tests.home-assistant-component-tests.raspberry_pi
Open source home automation that puts local control and privacy first
Package maintainers
-
@michaelshmitty Michael Smith <shmitty@protonmail.com>
-
@romildo José Romildo Malaquias <malaquias@gmail.com>
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@dotlambda ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86 <nix@dotlambda.de>
-
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@tkerber Thomas Kerber <tk@drwx.org>
-
@dezgeg Tuomas Tynkkynen <tuomas.tynkkynen@iki.fi>
-
@minijackson Rémi Nicole <minijackson@riseup.net>
-
@Izorkin Yurii Izorkin <Izorkin@gmail.com>
-
@Luflosi Luflosi <luflosi@luflosi.de>
-
@dasJ Janne Heß <janne@hess.ooo>
-
@lopsided98 Ben Wolsieffer <benwolsieffer@gmail.com>
-
@peterhoeg Peter Hoeg <peter@hoeg.com>
-
@ryota-ka Ryota Kameoka <ok@ryota-ka.me>
-
@DimitarNestorov Dimitar Nestorov <nix@dimitarnestorov.com>
-
@pyrox0 Pyrox <pyrox@pyrox.dev>