2.1 LOW
- CVSS version (CVSS): 4.0
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Attack Requirement (AT): None (N)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Vulnerable System Impact Confidentiality (VC): Low (L)
- Vulnerable System Impact Integrity (VI): Low (L)
- Vulnerable System Impact Availability (VA): Low (L)
- Subsequent System Impact Confidentiality (SC): None (N)
- Subsequent System Impact Integrity (SI): None (N)
- Subsequent System Impact Availability (SA): None (N)
- Exploit Maturity (E): POC (P)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Attack Requirement (MAT): None (N)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
- Modified Vulnerable System Impact Integrity (MVI): Low (L)
- Modified Vulnerable System Impact Availability (MVA): Low (L)
- Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
- Modified Subsequent System Impact Integrity (MSI): Negligible (N)
- Modified Subsequent System Impact Availability (MSA): Negligible (N)
- Safety (S): Not Defined (X)
- Automatable (AU): Not Defined (X)
- Recovery (R): Not Defined (X)
- Value Density (V): Not Defined (X)
- Vulnerability Response Effort (RE): Not Defined (X)
- Provider Urgency (U): Not Defined (X)
- Confidentiality Req. (CR): Not Defined (X)
- Integrity Req. (IR): Not Defined (X)
- Availability Req. (AR): Not Defined (X)
Activity log
- Created suggestion
pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection
A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file \pig-master\pig-visual\pig-codegen\src\main\java\com\pig4cloud\pig\codegen\service\impl\GeneratorServiceImpl.java of the component pig-codegen. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
-
-
CVE-2026-15512 | CVE Analysis and Report third-party-advisory
-
Submit #847500 | https://github.com/pig-mesh/pig pig v3.9.2 Code Injection third-party-advisory
Affected products
- ==3.9.1
- ==3.9.2
- ==3.9.0
Matching in nixpkgs
pkgs.pig
High-level language for Apache Hadoop
pkgs.pigz
Parallel implementation of gzip for multi-core machines
pkgs.dhcpig
Tool to perform advanced DHCP exhaustion attack
pkgs.pigeon
PEG parser generator for Go
pkgs.piglit
OpenGL test suite, and test-suite runner
-
nixos-unstable 2026-05-04
- nixpkgs-unstable 2026-05-04
- nixos-unstable-small 2026-05-04
-
nixos-26.05 2026-05-04
- nixos-26.05-small 2026-05-04
- nixpkgs-26.05-darwin 2026-05-04
pkgs.pigpio
C library for the Raspberry which allows control of the General Purpose Input Outputs (GPIO)
pkgs.spigot
Command-line exact real calculator
-
nixos-unstable 20240909.f158e08
- nixpkgs-unstable 20240909.f158e08
- nixos-unstable-small 20240909.f158e08
-
nixos-26.05 20240909.f158e08
- nixos-26.05-small 20240909.f158e08
- nixpkgs-26.05-darwin 20240909.f158e08
pkgs.pigment
Extract color palettes from your images
pkgs.dovecot_pigeonhole
Sieve plugin for the Dovecot IMAP server
pkgs.dovecot_pigeonhole_0_5
Sieve plugin for the Dovecot IMAP server
pkgs.dovecot_pigeonhole_2_4
Sieve plugin for the Dovecot IMAP server
pkgs.haskellPackages.apigen
FFI API generator for several languages
pkgs.python313Packages.pigpio
C library for the Raspberry which allows control of the General Purpose Input Outputs (GPIO)
pkgs.python314Packages.pigpio
C library for the Raspberry which allows control of the General Purpose Input Outputs (GPIO)
pkgs.typstPackages.pigmentpedia
An extensive color library for Typst
pkgs.typstPackages.pigmentpedia_0_1_0
An extended color library for Typst
pkgs.typstPackages.pigmentpedia_0_3_0
An extensive color library for Typst
pkgs.typstPackages.pigmentpedia_0_3_1
An extensive color library for Typst
pkgs.typstPackages.pigmentpedia_0_3_2
An extensive color library for Typst
pkgs.typstPackages.pigmentpedia_0_3_3
An extensive color library for Typst
pkgs.haskellPackages.amazonka-apigateway
Amazon API Gateway SDK
-
nixos-unstable 2.0-unstable-2025-04-16
- nixpkgs-unstable 2.0-unstable-2025-04-16
- nixos-unstable-small 2.0-unstable-2025-04-16
-
nixos-26.05 2.0-unstable-2025-04-16
- nixos-26.05-small 2.0-unstable-2025-04-16
- nixpkgs-26.05-darwin 2.0-unstable-2025-04-16
pkgs.gnomeExtensions.pigeon-email-notifier
Email notifier for Gmail, Outlook, and IMAP using GNOME Online Accounts
pkgs.haskellPackages.amazonka-apigatewayv2
Amazon ApiGatewayV2 SDK
-
nixos-unstable 2.0-unstable-2025-04-16
- nixpkgs-unstable 2.0-unstable-2025-04-16
- nixos-unstable-small 2.0-unstable-2025-04-16
-
nixos-26.05 2.0-unstable-2025-04-16
- nixos-26.05-small 2.0-unstable-2025-04-16
- nixpkgs-26.05-darwin 2.0-unstable-2025-04-16
pkgs.python313Packages.mypy-boto3-apigateway
Type annotations for boto3 apigateway
pkgs.python314Packages.mypy-boto3-apigateway
Type annotations for boto3 apigateway
pkgs.chickenPackages_5.chickenEggs.pigeon-hole
A mailbox constrained by capacity.
pkgs.python313Packages.mypy-boto3-apigatewayv2
Type annotations for boto3 apigatewayv2
pkgs.python314Packages.mypy-boto3-apigatewayv2
Type annotations for boto3 apigatewayv2
pkgs.python313Packages.types-aiobotocore-apigateway
Type annotations for aiobotocore apigateway
pkgs.haskellPackages.amazonka-apigatewaymanagementapi
Amazon ApiGatewayManagementApi SDK
-
nixos-unstable 2.0-unstable-2025-04-16
- nixpkgs-unstable 2.0-unstable-2025-04-16
- nixos-unstable-small 2.0-unstable-2025-04-16
-
nixos-26.05 2.0-unstable-2025-04-16
- nixos-26.05-small 2.0-unstable-2025-04-16
- nixpkgs-26.05-darwin 2.0-unstable-2025-04-16
pkgs.python313Packages.types-aiobotocore-apigatewayv2
Type annotations for aiobotocore apigatewayv2
pkgs.python313Packages.mypy-boto3-apigatewaymanagementapi
Type annotations for boto3 apigatewaymanagementapi
pkgs.python314Packages.mypy-boto3-apigatewaymanagementapi
Type annotations for boto3 apigatewaymanagementapi
Package maintainers
-
@Tochiaha Tochukwu Ahanonu <tochiahan@proton.me>
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@Jappie3 Jappie3 <jappie3+git@jappie.dev>
-
@helsinki-Jo Joachim Ernst <joachim.ernst@helsinki-systems.de>
-
@dasJ Janne Heß <janne@hess.ooo>
-
@honnip Jung seungwoo <me@honnip.page>
-
@zimbatm zimbatm <zimbatm@zimbatm.com>
-
@Flakebi Sebastian Neubauer <flakebi@t-online.de>
-
@0xda157 0xda157 <da157@voidq.com>
-
@doronbehar Doron Behar <me@doronbehar.com>
-
@SandaruKasa Sandaru Kasa <SandaruKasa+nix@ya.ru>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@RossSmyth Ross Smyth
-
@cherrypiejam Gongqi Huang