Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

Untriaged
Filter by:
With package: vscode-extensions.visualstudioexptteam.vscodeintellicode

Found 3 matching suggestions

View:
Compact
Detailed
Permalink CVE-2019-25276
7.8 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): LOCAL
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
created 2 months, 1 week ago
Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path

Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\ to inject malicious code that would execute with LocalSystem permissions.

Affected products

Studio
  • ==5000

Matching in nixpkgs

pkgs.lmstudio

LM Studio is an easy to use desktop app for experimenting with local and open-source Large Language Models (LLMs)

pkgs.texstudio

TeX and LaTeX editor

  • nixos-unstable -
  • nixos-25.11 4.9.0

pkgs.obs-studio

Free and open source software for video recording and live streaming

  • nixos-unstable -
  • nixos-25.11 32.0.1

pkgs.sql-studio

SQL Database Explorer [SQLite, libSQL, PostgreSQL, MySQL/MariaDB, ClickHouse, Microsoft SQL Server]

  • nixos-unstable -
  • nixos-25.11 0.1.45

pkgs.zmk-studio

Tool for runtime keymap updates on ZMK-powered devices without reflashing firmware

  • nixos-unstable -

pkgs.realm-studio

Visual tool to view, edit, and model Realm databases.

  • nixos-unstable -
  • nixos-25.11 15.2.1

pkgs.sqlitestudio

Free, open source, multi-platform SQLite database manager

  • nixos-unstable -
  • nixos-25.11 3.4.17

pkgs.cherry-studio

Desktop client that supports for multiple LLM providers

  • nixos-unstable -
  • nixos-25.11 1.6.7

pkgs.lutgen-studio

Official GUI for Lutgen, the best way to apply popular colorschemes to any image or wallpaper

  • nixos-unstable -
  • nixos-25.11 0.3.0

pkgs.azuredatastudio

Data management tool that enables working with SQL Server, Azure SQL DB and SQL DW

  • nixos-unstable -
  • nixos-25.11 1.49.1

pkgs.beekeeper-studio

Modern and easy to use SQL client for MySQL, Postgres, SQLite, SQL Server, and more

  • nixos-unstable -
  • nixos-25.11 5.3.4

pkgs.sourcepawn-studio

LSP implementation for the SourcePawn programming language written in Rust

  • nixos-unstable -
  • nixos-25.11 8.1.8

pkgs.cups-toshiba-estudio

Printer only driver for the Toshiba e-STUDIO class of printers

  • nixos-unstable -
    • nixpkgs-unstable 7.89
  • nixos-25.11 7.89

pkgs.sqlitestudio-plugins

Official plugins for SQLiteStudio, a free, open source, multi-platform SQLite database manager

  • nixos-unstable -
  • nixos-25.11 3.4.17

Package maintainers

Permalink CVE-2025-6384
created 9 months, 3 weeks ago
Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE (Remote Code Execution). This issue affects CrafterCMS: from 4.0.0 through 4.2.2.

Affected products

Studio
  • <4.3.0

Matching in nixpkgs

Package maintainers

Permalink CVE-2023-26020
5.7 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): HIGH
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
created 1 year, 1 month ago
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crafter Studio

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, ARM, 64 bit allows SQL Injection.This issue affects CrafterCMS v4.0 from 4.0.0 through 4.0.1, and v3.1 from 3.1.0 through 3.1.26.

Affected products

Studio
  • =<4.0.1
  • =<3.1.26

Matching in nixpkgs

Package maintainers