Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses
Filter by:
With package: wasm3

Found 2 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-5567
8.8 HIGH
  • CVSS version: 3.1
  • Attack vector (AV):
  • Attack complexity (AC):
  • Privileges required (PR):
  • User interaction (UI):
  • Scope (S):
  • Confidentiality impact (C):
  • Integrity impact (I):
  • Availability impact (A):
created 1 week, 1 day ago
Tenda M3 Destination setAdvPolicyData buffer overflow

A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

Affected products

M3
  • ==1.0.0.10

Matching in nixpkgs

pkgs.fvwm3

Multiple large virtual desktop window manager - Version 3

pkgs.wasm3

Fastest WebAssembly interpreter, and the most universal runtime

pkgs.icbm3d

3D vector-based clone of the atari game Missile Command

  • nixos-unstable 0.4
    • nixpkgs-unstable 0.4
    • nixos-unstable-small 0.4
  • nixos-25.11 0.4
    • nixos-25.11-small 0.4
    • nixpkgs-25.11-darwin 0.4

pkgs.m32edit

Editor for the Midas M32 digital mixer

  • nixos-unstable 4.4.1
    • nixpkgs-unstable 4.4.1
    • nixos-unstable-small 4.4.1
  • nixos-25.11 4.4
    • nixos-25.11-small 4.4
    • nixpkgs-25.11-darwin 4.4

pkgs.stm32flash

Open source flash program for the STM32 ARM processors using the ST bootloader

  • nixos-unstable 0.7
    • nixpkgs-unstable 0.7
    • nixos-unstable-small 0.7
  • nixos-25.11 0.7
    • nixos-25.11-small 0.7
    • nixpkgs-25.11-darwin 0.7

pkgs.stm32cubemx

A graphical tool for configuring STM32 microcontrollers and microprocessors

pkgs.stm32loader

Flash firmware to STM32 microcontrollers in Python

Package maintainers

Untriaged
Permalink CVE-2025-15572
3.3 LOW
  • CVSS version: 3.1
  • Attack vector (AV):
  • Attack complexity (AC):
  • Privileges required (PR):
  • User interaction (UI):
  • Scope (S):
  • Confidentiality impact (C):
  • Integrity impact (I):
  • Availability impact (A):
created 2 months ago
wasm3 NewCodePage memory leak

A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer at the moment.

Affected products

wasm3
  • ==0.3
  • ==0.2
  • ==0.5.0
  • ==0.4
  • ==0.1

Matching in nixpkgs

pkgs.wasm3

Fastest WebAssembly interpreter, and the most universal runtime

Package maintainers