Nixpkgs security tracker

Untriaged

Permalink CVE-2025-53447

8.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 2 months, 4 weeks ago

WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Assembly assembly allows PHP Local File Inclusion.This issue affects Assembly: from n/a through <= 1.1.

References

Affected products

assembly

=<<= 1.1

Matching in nixpkgs

pkgs.wasm-strip

> Strips custom sections

nixos-unstable 1.8.1
- nixpkgs-unstable 1.8.1
- nixos-unstable-small 1.8.1

pkgs.wast-refmt

WAST refmt

nixos-unstable 1.11.1
- nixpkgs-unstable 1.11.1
- nixos-unstable-small 1.11.1

pkgs.wasm-text-gen

Emit documentation/code for your WASM binary Edit

nixos-unstable 1.11.1
- nixpkgs-unstable 1.11.1
- nixos-unstable-small 1.11.1

pkgs.assemblyscript

TypeScript-like language for WebAssembly

nixos-unstable 0.28.2
- nixpkgs-unstable 0.28.2
- nixos-unstable-small 0.28.2
nixos-25.11 0.28.2
- nixpkgs-25.11-darwin 0.28.2

pkgs.webassemblyjs-cli

Toolbox for WebAssembly

nixos-unstable 1.11.1
- nixpkgs-unstable 1.11.1
- nixos-unstable-small 1.11.1
nixos-25.11 1.14.1
- nixpkgs-25.11-darwin 1.14.1

pkgs.webassemblyjs-repl

WebAssembly REPL

nixos-unstable 1.11.1
- nixpkgs-unstable 1.11.1
- nixos-unstable-small 1.11.1
nixos-25.11 1.14.1
- nixpkgs-25.11-darwin 1.14.1

pkgs.tests.dotnet.structured-attrs.check-output

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.11 -
- nixpkgs-25.11-darwin

pkgs.vimPlugins.nvim-treesitter-parsers.disassembly