Nixpkgs security tracker

Permalink CVE-2026-4369

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 3 hours ago

Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name

A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

References

Affected products

Fusion

<2702.1.47

Matching in nixpkgs

pkgs.datafusion-cli

CLI for Apache Arrow DataFusion

nixos-unstable 53.0.0
- nixpkgs-unstable 53.0.0
- nixos-unstable-small 53.0.0
nixos-25.11 50.3.0
- nixos-25.11-small 50.3.0
- nixpkgs-25.11-darwin 50.3.0

pkgs.lxgw-fusionkai

Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One

nixos-unstable 24.134
- nixpkgs-unstable 24.134
- nixos-unstable-small 24.134
nixos-25.11 24.134
- nixos-25.11-small 24.134
- nixpkgs-25.11-darwin 24.134

pkgs.fusionInventory

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6
nixos-25.11 2.6
- nixos-25.11-small 2.6
- nixpkgs-25.11-darwin 2.6

pkgs.finalfusion-utils

Utility for converting, quantizing, and querying word embeddings

nixos-unstable 0.14.1
- nixpkgs-unstable 0.14.1
- nixos-unstable-small 0.14.1
nixos-25.11 0.14.1
- nixos-25.11-small 0.14.1
- nixpkgs-25.11-darwin 0.14.1

pkgs.stable-diffusion-cpp

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.fusioninventory-agent

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6
nixos-25.11 2.6
- nixos-25.11-small 2.6
- nixpkgs-25.11-darwin 2.6

pkgs.stable-diffusion-cpp-cuda

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.stable-diffusion-cpp-rocm

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.stable-diffusion-cpp-vulkan

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.python312Packages.datafusion

Extensible query execution framework

nixos-25.11 50.0.0
- nixos-25.11-small 50.0.0
- nixpkgs-25.11-darwin 50.0.0

pkgs.python313Packages.datafusion

Extensible query execution framework

nixos-unstable 52.3.0
- nixpkgs-unstable 52.3.0
- nixos-unstable-small 52.3.0
nixos-25.11 50.0.0
- nixos-25.11-small 50.0.0
- nixpkgs-25.11-darwin 50.0.0

pkgs.python313Packages.vegafusion

Core tools for using VegaFusion from Python

nixos-unstable 2.0.3
- nixpkgs-unstable 2.0.3
- nixos-unstable-small 2.0.3

pkgs.python314Packages.datafusion

Extensible query execution framework

nixos-unstable 52.3.0
- nixpkgs-unstable 52.3.0
- nixos-unstable-small 52.3.0

pkgs.python314Packages.vegafusion

Core tools for using VegaFusion from Python

nixos-unstable 2.0.3
- nixpkgs-unstable 2.0.3
- nixos-unstable-small 2.0.3

pkgs.haskellPackages.fusion-plugin

GHC plugin to make stream fusion more predictable

nixos-unstable 0.2.7
- nixpkgs-unstable 0.2.7
- nixos-unstable-small 0.2.7
nixos-25.11 0.2.7
- nixos-25.11-small 0.2.7
- nixpkgs-25.11-darwin 0.2.7

pkgs.pkgsRocm.stable-diffusion-cpp

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.python312Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-25.11 0.7.1
- nixos-25.11-small 0.7.1
- nixpkgs-25.11-darwin 0.7.1

pkgs.python312Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.python313Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-25.11 0.7.1
- nixos-25.11-small 0.7.1
- nixpkgs-25.11-darwin 0.7.1

pkgs.python313Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.python314Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python314Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.haskellPackages.gogol-datafusion

Google Cloud Data Fusion SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.haskellPackages.gogol-fusiontables

Google Fusion Tables SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.haskellPackages.fusion-plugin-types

Types for the fusion-plugin package

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-25.11 0.1.0
- nixos-25.11-small 0.1.0
- nixpkgs-25.11-darwin 0.1.0

pkgs.pkgsRocm.python3Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.pkgsRocm.stable-diffusion-cpp-vulkan

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.vimPlugins.nvim-treesitter-parsers.fusion

None

nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@happysalada Raphael Megzari <raphael@megzari.com>
@phile314 Philipp Hausmann <nix@314.ch>
@hellodword hellodword
@Mic92 Jörg Thalheim <joerg@thalheim.io>
@dit7ya Mostly Void <7rat13@gmail.com>
@adrlau Adrian Gunnar Lauterer <adrian@lauterer.it>
@cpcloud Phillip Cloud
@wariuccio Wariuccio

Permalink CVE-2026-4344

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 3 hours ago

Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name

A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

References

Affected products

Fusion

<2702.1.47

Matching in nixpkgs

pkgs.datafusion-cli

CLI for Apache Arrow DataFusion

nixos-unstable 53.0.0
- nixpkgs-unstable 53.0.0
- nixos-unstable-small 53.0.0
nixos-25.11 50.3.0
- nixos-25.11-small 50.3.0
- nixpkgs-25.11-darwin 50.3.0

pkgs.lxgw-fusionkai

Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One

nixos-unstable 24.134
- nixpkgs-unstable 24.134
- nixos-unstable-small 24.134
nixos-25.11 24.134
- nixos-25.11-small 24.134
- nixpkgs-25.11-darwin 24.134

pkgs.fusionInventory

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6
nixos-25.11 2.6
- nixos-25.11-small 2.6
- nixpkgs-25.11-darwin 2.6

pkgs.finalfusion-utils

Utility for converting, quantizing, and querying word embeddings

nixos-unstable 0.14.1
- nixpkgs-unstable 0.14.1
- nixos-unstable-small 0.14.1
nixos-25.11 0.14.1
- nixos-25.11-small 0.14.1
- nixpkgs-25.11-darwin 0.14.1

pkgs.stable-diffusion-cpp

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.fusioninventory-agent

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6
nixos-25.11 2.6
- nixos-25.11-small 2.6
- nixpkgs-25.11-darwin 2.6

pkgs.stable-diffusion-cpp-cuda

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.stable-diffusion-cpp-rocm

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.stable-diffusion-cpp-vulkan

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.python312Packages.datafusion

Extensible query execution framework

nixos-25.11 50.0.0
- nixos-25.11-small 50.0.0
- nixpkgs-25.11-darwin 50.0.0

pkgs.python313Packages.datafusion

Extensible query execution framework

nixos-unstable 52.3.0
- nixpkgs-unstable 52.3.0
- nixos-unstable-small 52.3.0
nixos-25.11 50.0.0
- nixos-25.11-small 50.0.0
- nixpkgs-25.11-darwin 50.0.0

pkgs.python313Packages.vegafusion

Core tools for using VegaFusion from Python

nixos-unstable 2.0.3
- nixpkgs-unstable 2.0.3
- nixos-unstable-small 2.0.3

pkgs.python314Packages.datafusion

Extensible query execution framework

nixos-unstable 52.3.0
- nixpkgs-unstable 52.3.0
- nixos-unstable-small 52.3.0

pkgs.python314Packages.vegafusion

Core tools for using VegaFusion from Python

nixos-unstable 2.0.3
- nixpkgs-unstable 2.0.3
- nixos-unstable-small 2.0.3

pkgs.haskellPackages.fusion-plugin

GHC plugin to make stream fusion more predictable

nixos-unstable 0.2.7
- nixpkgs-unstable 0.2.7
- nixos-unstable-small 0.2.7
nixos-25.11 0.2.7
- nixos-25.11-small 0.2.7
- nixpkgs-25.11-darwin 0.2.7

pkgs.pkgsRocm.stable-diffusion-cpp

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.python312Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-25.11 0.7.1
- nixos-25.11-small 0.7.1
- nixpkgs-25.11-darwin 0.7.1

pkgs.python312Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.python313Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-25.11 0.7.1
- nixos-25.11-small 0.7.1
- nixpkgs-25.11-darwin 0.7.1

pkgs.python313Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.python314Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python314Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.haskellPackages.gogol-datafusion

Google Cloud Data Fusion SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.haskellPackages.gogol-fusiontables

Google Fusion Tables SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.haskellPackages.fusion-plugin-types

Types for the fusion-plugin package

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-25.11 0.1.0
- nixos-25.11-small 0.1.0
- nixpkgs-25.11-darwin 0.1.0

pkgs.pkgsRocm.python3Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.pkgsRocm.stable-diffusion-cpp-vulkan

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.vimPlugins.nvim-treesitter-parsers.fusion

None

nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@happysalada Raphael Megzari <raphael@megzari.com>
@phile314 Philipp Hausmann <nix@314.ch>
@hellodword hellodword
@Mic92 Jörg Thalheim <joerg@thalheim.io>
@dit7ya Mostly Void <7rat13@gmail.com>
@adrlau Adrian Gunnar Lauterer <adrian@lauterer.it>
@cpcloud Phillip Cloud
@wariuccio Wariuccio

Permalink CVE-2026-4345

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 3 hours ago

Stored Cross-Site Scripting (XSS) Vulnerability in Design Name

A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

References

Affected products

Fusion

<2702.1.47

Matching in nixpkgs

pkgs.datafusion-cli

CLI for Apache Arrow DataFusion

nixos-unstable 53.0.0
- nixpkgs-unstable 53.0.0
- nixos-unstable-small 53.0.0
nixos-25.11 50.3.0
- nixos-25.11-small 50.3.0
- nixpkgs-25.11-darwin 50.3.0

pkgs.lxgw-fusionkai

Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One

nixos-unstable 24.134
- nixpkgs-unstable 24.134
- nixos-unstable-small 24.134
nixos-25.11 24.134
- nixos-25.11-small 24.134
- nixpkgs-25.11-darwin 24.134

pkgs.fusionInventory

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6
nixos-25.11 2.6
- nixos-25.11-small 2.6
- nixpkgs-25.11-darwin 2.6

pkgs.finalfusion-utils

Utility for converting, quantizing, and querying word embeddings

nixos-unstable 0.14.1
- nixpkgs-unstable 0.14.1
- nixos-unstable-small 0.14.1
nixos-25.11 0.14.1
- nixos-25.11-small 0.14.1
- nixpkgs-25.11-darwin 0.14.1

pkgs.stable-diffusion-cpp

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.fusioninventory-agent

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6
nixos-25.11 2.6
- nixos-25.11-small 2.6
- nixpkgs-25.11-darwin 2.6

pkgs.stable-diffusion-cpp-cuda

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.stable-diffusion-cpp-rocm

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.stable-diffusion-cpp-vulkan

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.python312Packages.datafusion

Extensible query execution framework

nixos-25.11 50.0.0
- nixos-25.11-small 50.0.0
- nixpkgs-25.11-darwin 50.0.0

pkgs.python313Packages.datafusion

Extensible query execution framework

nixos-unstable 52.3.0
- nixpkgs-unstable 52.3.0
- nixos-unstable-small 52.3.0
nixos-25.11 50.0.0
- nixos-25.11-small 50.0.0
- nixpkgs-25.11-darwin 50.0.0

pkgs.python313Packages.vegafusion

Core tools for using VegaFusion from Python

nixos-unstable 2.0.3
- nixpkgs-unstable 2.0.3
- nixos-unstable-small 2.0.3

pkgs.python314Packages.datafusion

Extensible query execution framework

nixos-unstable 52.3.0
- nixpkgs-unstable 52.3.0
- nixos-unstable-small 52.3.0

pkgs.python314Packages.vegafusion

Core tools for using VegaFusion from Python

nixos-unstable 2.0.3
- nixpkgs-unstable 2.0.3
- nixos-unstable-small 2.0.3

pkgs.haskellPackages.fusion-plugin

GHC plugin to make stream fusion more predictable

nixos-unstable 0.2.7
- nixpkgs-unstable 0.2.7
- nixos-unstable-small 0.2.7
nixos-25.11 0.2.7
- nixos-25.11-small 0.2.7
- nixpkgs-25.11-darwin 0.2.7

pkgs.pkgsRocm.stable-diffusion-cpp

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.python312Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-25.11 0.7.1
- nixos-25.11-small 0.7.1
- nixpkgs-25.11-darwin 0.7.1

pkgs.python312Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.python313Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-25.11 0.7.1
- nixos-25.11-small 0.7.1
- nixpkgs-25.11-darwin 0.7.1

pkgs.python313Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.python314Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python314Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.haskellPackages.gogol-datafusion

Google Cloud Data Fusion SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.haskellPackages.gogol-fusiontables

Google Fusion Tables SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.haskellPackages.fusion-plugin-types

Types for the fusion-plugin package

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-25.11 0.1.0
- nixos-25.11-small 0.1.0
- nixpkgs-25.11-darwin 0.1.0

pkgs.pkgsRocm.python3Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.pkgsRocm.stable-diffusion-cpp-vulkan

Stable Diffusion inference in pure C/C++

nixos-unstable 558-8afbeb6
- nixpkgs-unstable 558-8afbeb6
- nixos-unstable-small 558-8afbeb6

pkgs.vimPlugins.nvim-treesitter-parsers.fusion

None

nixos-25.11 -
- nixos-25.11-small
- nixpkgs-25.11-darwin

Package maintainers

@happysalada Raphael Megzari <raphael@megzari.com>
@phile314 Philipp Hausmann <nix@314.ch>
@hellodword hellodword
@Mic92 Jörg Thalheim <joerg@thalheim.io>
@dit7ya Mostly Void <7rat13@gmail.com>
@adrlau Adrian Gunnar Lauterer <adrian@lauterer.it>
@cpcloud Phillip Cloud
@wariuccio Wariuccio

Permalink CVE-2026-22715

5.9 MEDIUM

CVSS version: 3.1
Attack vector (AV): ADJACENT_NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): HIGH
Availability impact (A): LOW

created 1 month, 2 weeks ago

VMware Workstation/Fusion NAT vulnerability

VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/co… vendor-advisory

Affected products

ProductB

==25H2U1
<25H2U1

VMware Workstation

==25H2U1
<25H2U1

Matching in nixpkgs

pkgs.datafusion-cli

cli for Apache Arrow DataFusion

nixos-unstable 52.1.0
- nixpkgs-unstable 52.1.0
- nixos-unstable-small 52.1.0
nixos-25.11 50.3.0
- nixos-25.11-small 50.3.0
- nixpkgs-25.11-darwin 50.3.0

pkgs.lxgw-fusionkai

Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One

nixos-unstable 24.134
- nixpkgs-unstable 24.134
- nixos-unstable-small 24.134
nixos-25.11 24.134
- nixos-25.11-small 24.134
- nixpkgs-25.11-darwin 24.134

pkgs.fusionInventory

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6
nixos-25.11 2.6
- nixos-25.11-small 2.6
- nixpkgs-25.11-darwin 2.6

pkgs.finalfusion-utils

Utility for converting, quantizing, and querying word embeddings

nixos-unstable 0.14.1
- nixpkgs-unstable 0.14.1
- nixos-unstable-small 0.14.1
nixos-25.11 0.14.1
- nixos-25.11-small 0.14.1
- nixpkgs-25.11-darwin 0.14.1

pkgs.helio-workstation

One music sequencer for all major platforms, both desktop and mobile

nixos-unstable 3.17
- nixpkgs-unstable 3.17
- nixos-unstable-small 3.17
nixos-25.11 3.16
- nixos-25.11-small 3.16
- nixpkgs-25.11-darwin 3.16

pkgs.vmware-workstation

Industry standard desktop hypervisor for x86-64 architecture

nixos-unstable 17.6.4
- nixpkgs-unstable 17.6.4
- nixos-unstable-small 17.6.4
nixos-25.11 17.6.4
- nixos-25.11-small 17.6.4
- nixpkgs-25.11-darwin 17.6.4

pkgs.linuxPackages.vmware

Kernel modules needed for VMware hypervisor

nixos-unstable 17.6.3-20250728-6.18.13
- nixpkgs-unstable 17.6.3-20250728-6.18.13
- nixos-unstable-small 17.6.3-20250728-6.18.13
nixos-25.11 17.6.3-20250728-6.12.74
- nixos-25.11-small 17.6.3-20250728-6.12.74
- nixpkgs-25.11-darwin 17.6.3-20250728-6.12.74

pkgs.stable-diffusion-cpp

Stable Diffusion inference in pure C/C++

nixos-unstable 492-f957fa3
- nixpkgs-unstable 492-f957fa3
- nixos-unstable-small 492-f957fa3

pkgs.fusioninventory-agent

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6

pkgs.linuxPackages_lqx.vmware

Kernel modules needed for VMware hypervisor

nixos-unstable 17.6.3-20250728-6.18.12
- nixpkgs-unstable 17.6.3-20250728-6.18.12
- nixos-unstable-small 17.6.3-20250728-6.18.12
nixos-25.11 17.6.3-20250728-6.18.8
- nixos-25.11-small 17.6.3-20250728-6.18.8
- nixpkgs-25.11-darwin 17.6.3-20250728-6.18.8

pkgs.linuxPackages_zen.vmware

Kernel modules needed for VMware hypervisor

nixos-unstable 17.6.3-20250728-6.18.9
- nixpkgs-unstable 17.6.3-20250728-6.18.9
- nixos-unstable-small 17.6.3-20250728-6.18.9
nixos-25.11 17.6.3-20250728-6.18.9
- nixos-25.11-small 17.6.3-20250728-6.18.9
- nixpkgs-25.11-darwin 17.6.3-20250728-6.18.9

pkgs.stable-diffusion-cpp-cuda

Stable Diffusion inference in pure C/C++

nixos-unstable 492-f957fa3
- nixpkgs-unstable 492-f957fa3
- nixos-unstable-small 492-f957fa3

pkgs.stable-diffusion-cpp-rocm

Stable Diffusion inference in pure C/C++

nixos-unstable 492-f957fa3
- nixpkgs-unstable 492-f957fa3
- nixos-unstable-small 492-f957fa3

pkgs.linuxPackages-libre.vmware

Kernel modules needed for VMware hypervisor

pkgs.linuxPackages_latest.vmware

Kernel modules needed for VMware hypervisor

nixos-unstable 17.6.3-20250728-6.19.3
- nixpkgs-unstable 17.6.3-20250728-6.19.3
- nixos-unstable-small 17.6.3-20250728-6.19.3
nixos-25.11 17.6.3-20250728-6.19.3
- nixos-25.11-small 17.6.3-20250728-6.19.3
- nixpkgs-25.11-darwin 17.6.3-20250728-6.19.3

pkgs.linuxPackages_xanmod.vmware

Kernel modules needed for VMware hypervisor

nixos-unstable 17.6.3-20250728-6.12.74
- nixpkgs-unstable 17.6.3-20250728-6.12.74
- nixos-unstable-small 17.6.3-20250728-6.12.74
nixos-25.11 17.6.3-20250728-6.12.74
- nixos-25.11-small 17.6.3-20250728-6.12.74
- nixpkgs-25.11-darwin 17.6.3-20250728-6.12.74

pkgs.stable-diffusion-cpp-vulkan

Stable Diffusion inference in pure C/C++

nixos-unstable 492-f957fa3
- nixpkgs-unstable 492-f957fa3
- nixos-unstable-small 492-f957fa3

pkgs.python312Packages.datafusion

Extensible query execution framework

nixos-25.11 50.0.0
- nixos-25.11-small 50.0.0
- nixpkgs-25.11-darwin 50.0.0

pkgs.python313Packages.datafusion

Extensible query execution framework

nixos-unstable 50.1.0
- nixpkgs-unstable 50.1.0
- nixos-unstable-small 50.1.0
nixos-25.11 50.0.0
- nixos-25.11-small 50.0.0
- nixpkgs-25.11-darwin 50.0.0

pkgs.python313Packages.vegafusion

Core tools for using VegaFusion from Python

nixos-unstable 2.0.3
- nixpkgs-unstable 2.0.3
- nixos-unstable-small 2.0.3

pkgs.python314Packages.datafusion

Extensible query execution framework

nixos-unstable 50.1.0
- nixpkgs-unstable 50.1.0
- nixos-unstable-small 50.1.0

pkgs.python314Packages.vegafusion

Core tools for using VegaFusion from Python

nixos-unstable 2.0.3
- nixpkgs-unstable 2.0.3
- nixos-unstable-small 2.0.3

pkgs.haskellPackages.fusion-plugin

GHC plugin to make stream fusion more predictable

nixos-unstable 0.2.7
- nixpkgs-unstable 0.2.7
- nixos-unstable-small 0.2.7
nixos-25.11 0.2.7
- nixos-25.11-small 0.2.7
- nixpkgs-25.11-darwin 0.2.7

pkgs.linuxPackages_hardened.vmware

Kernel modules needed for VMware hypervisor

pkgs.pkgsRocm.stable-diffusion-cpp

Stable Diffusion inference in pure C/C++

nixos-unstable 492-f957fa3
- nixpkgs-unstable 492-f957fa3
- nixos-unstable-small 492-f957fa3

pkgs.python312Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-25.11 0.7.1
- nixos-25.11-small 0.7.1
- nixpkgs-25.11-darwin 0.7.1

pkgs.python312Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.python313Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-25.11 0.7.1
- nixos-25.11-small 0.7.1
- nixpkgs-25.11-darwin 0.7.1

pkgs.python313Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1

pkgs.python314Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python314Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.haskellPackages.gogol-datafusion

Google Cloud Data Fusion SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

nixos-unstable 17.6.3-20250728-6.18.13
- nixpkgs-unstable 17.6.3-20250728-6.18.13
- nixos-unstable-small 17.6.3-20250728-6.18.13
nixos-25.11 17.6.3-20250728-6.18.13
- nixos-25.11-small 17.6.3-20250728-6.18.13
- nixpkgs-25.11-darwin 17.6.3-20250728-6.18.13

pkgs.linuxPackages_xanmod_stable.vmware

Kernel modules needed for VMware hypervisor

nixos-unstable 17.6.3-20250728-6.18.13
- nixpkgs-unstable 17.6.3-20250728-6.18.13
- nixos-unstable-small 17.6.3-20250728-6.18.13
nixos-25.11 17.6.3-20250728-6.18.13
- nixos-25.11-small 17.6.3-20250728-6.18.13
- nixpkgs-25.11-darwin 17.6.3-20250728-6.18.13

pkgs.haskellPackages.fusion-plugin-types

Types for the fusion-plugin package

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-25.11 0.1.0
- nixos-25.11-small 0.1.0
- nixpkgs-25.11-darwin 0.1.0

pkgs.pkgsRocm.python3Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1
nixos-25.11 0.1.1.post1
- nixos-25.11-small 0.1.1.post1
- nixpkgs-25.11-darwin 0.1.1.post1