Nixpkgs security tracker

Untriaged

Permalink CVE-2025-53439

8.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 4 months ago

WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through <= 1.13.

References

Affected products

harper

=<<= 1.13

Matching in nixpkgs

pkgs.harper

Grammar Checker for Developers

nixos-unstable 0.56.0
- nixpkgs-unstable 0.56.0
- nixos-unstable-small 0.56.0
nixos-25.11 0.71.0
- nixpkgs-25.11-darwin 0.71.0

pkgs.emacsPackages.sharper

None

nixos-unstable 20230129.1827
- nixpkgs-unstable 20230129.1827
- nixos-unstable-small 20230129.1827

pkgs.vscode-extensions.elijah-potter.harper

The grammar checker for developers as a Visual Studio Code extension

nixos-25.11 0.71.0
- nixpkgs-25.11-darwin 0.71.0

Package maintainers

@pbsds Peder Bergebakken Sundt <pbsds@hotmail.com>
@MasterEvarior MasterEvarior <nix-maintainer@giannin.ch>

Suggestions search