Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses
Filter by:
With package: tests.fetchpatch2.simple

Found 3 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-6024
7.3 HIGH
  • CVSS version: 3.1
  • Attack vector (AV):
  • Attack complexity (AC):
  • Privileges required (PR):
  • User interaction (UI):
  • Scope (S):
  • Confidentiality impact (C):
  • Integrity impact (I):
  • Availability impact (A):
created 3 days, 23 hours ago
Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal

A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the component HTTP Handler. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

i6
  • ==1.0.0.7(2204)

Matching in nixpkgs

Package maintainers

Untriaged
Permalink CVE-2026-5567
8.8 HIGH
  • CVSS version: 3.1
  • Attack vector (AV):
  • Attack complexity (AC):
  • Privileges required (PR):
  • User interaction (UI):
  • Scope (S):
  • Confidentiality impact (C):
  • Integrity impact (I):
  • Availability impact (A):
created 1 week, 1 day ago
Tenda M3 Destination setAdvPolicyData buffer overflow

A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

Affected products

M3
  • ==1.0.0.10

Matching in nixpkgs

pkgs.fvwm3

Multiple large virtual desktop window manager - Version 3

pkgs.wasm3

Fastest WebAssembly interpreter, and the most universal runtime

pkgs.icbm3d

3D vector-based clone of the atari game Missile Command

  • nixos-unstable 0.4
    • nixpkgs-unstable 0.4
    • nixos-unstable-small 0.4
  • nixos-25.11 0.4
    • nixos-25.11-small 0.4
    • nixpkgs-25.11-darwin 0.4

pkgs.m32edit

Editor for the Midas M32 digital mixer

  • nixos-unstable 4.4.1
    • nixpkgs-unstable 4.4.1
    • nixos-unstable-small 4.4.1
  • nixos-25.11 4.4
    • nixos-25.11-small 4.4
    • nixpkgs-25.11-darwin 4.4

pkgs.stm32flash

Open source flash program for the STM32 ARM processors using the ST bootloader

  • nixos-unstable 0.7
    • nixpkgs-unstable 0.7
    • nixos-unstable-small 0.7
  • nixos-25.11 0.7
    • nixos-25.11-small 0.7
    • nixpkgs-25.11-darwin 0.7

pkgs.stm32cubemx

A graphical tool for configuring STM32 microcontrollers and microprocessors

pkgs.stm32loader

Flash firmware to STM32 microcontrollers in Python

Package maintainers

Untriaged
Permalink CVE-2025-69409
created 1 month, 3 weeks ago
WordPress PJ | Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes PJ | Life & Business Coaching pj allows PHP Local File Inclusion.This issue affects PJ | Life & Business Coaching: from n/a through <= 3.0.0.

Affected products

pj
  • =<<= 3.0.0

Matching in nixpkgs

pkgs.pj

Fast project directory finder that searches filesystems for git repositories

pkgs.pjsip

Multimedia communication library written in C, implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

pkgs.python312Packages.pjsua2

Multimedia communication library written in C, implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

pkgs.python313Packages.pjsua2

Multimedia communication library written in C, implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

pkgs.python314Packages.pjsua2

Multimedia communication library written in C, implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

  • nixos-unstable 2.16
    • nixpkgs-unstable 2.16
    • nixos-unstable-small 2.16

Package maintainers