Nixpkgs security tracker

Dismissed

(no matching packages found)

Permalink CVE-2026-53573

4.8 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): Active (A)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): Low (L)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Active (A)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Low (L)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

core-geonetwork has an Open Redirect Bypass

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter permits an attacker-controlled external redirect after login. This issue is fixed in versions 4.2.16 and 4.4.11.

References

https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-pjp7-q6wp-97qx x_refsource_CONFIRM
https://github.com/geonetwork/core-geonetwork/pull/9307 x_refsource_MISC
https://github.com/geonetwork/core-geonetwork/pull/9309 x_refsource_MISC
https://github.com/geonetwork/core-geonetwork/commit/0d74f673dfc926bde935819ed34636d789b2fecd x_refsource_MISC
https://github.com/geonetwork/core-geonetwork/commit/cde9b6481a29e2473b7b74479b4e3fd6843bac4e x_refsource_MISC
https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.16 x_refsource_MISC
https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.11 x_refsource_MISC

Affected products

core-geonetwork

==>= 4.4.0, < 4.4.11
==>= 4.2.0, < 4.2.16
==>= 4.0.0-alpha.1, <= 4.0.6
==>= 3.12.0, <= 3.12.12

Dismissed

(no matching packages found)

Permalink CVE-2026-67822

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in …

Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses sprintf to copy user-controlled 'GO' and 'index' parameters into a 64-byte stack buffer without length restriction, leading to stack overflow.

References

https://github.com/Tristerjh/Tenda/blob/main/Tenda_W6-S_GO_overflow.md exploit

Affected products

n/a

==n/a

Dismissed

(no matching packages found)

Permalink CVE-2026-51229

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

None

Affected products

Dismissed

(no matching packages found)

Permalink CVE-2026-51299

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

None

Affected products

Dismissed

(no matching packages found)

Permalink CVE-2026-67607

8.2 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

LightFTP 2.3.1 Race Condition DoS via worker_thread_cleanup

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fresh connection that reuses the FTP context against an in-progress ABRT cleanup. Attackers can exploit the unprotected re-check of WorkerThreadId between worker_thread_cleanup() and pthread_join() outside of MTLock to cause pthread_join() to operate on an invalid thread ID, resulting in a server crash. CVE-2024-11144 identifies an incomplete fix of this vulnerability.

References

Researcher Disclosure exploittechnical-description
https://www.vulncheck.com/advisories/lightftp-race-condition-dos-via-worker-thr… third-party-advisory

Affected products

LightFTP

=<2.3.1

Dismissed

(no matching packages found)

Permalink CVE-2026-51241

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

None

Affected products

Dismissed

(no matching packages found)

Permalink CVE-2026-18437

5.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

MailPress <= 1.5.0 - Missing Authorization to Unauthenticated Contact Updates

The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to update contact details.

References

Affected products

MailerPress – Newsletter, email marketing & AI automation

=<1.5.0

Dismissed

(no matching packages found)

Permalink CVE-2026-43831

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

tbc

Full details and mitigation steps are currently restricted and will be published at a later date.

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx

Affected products

tbc

==tbc

Dismissed

(no matching packages found)

Permalink CVE-2026-55497

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

Cloudreve: Server crash through image decompression/pixel bomb in thumbnail & avatar decoding (DoS)

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the built-in thumbnail and avatar image decoders limit compressed file size but do not limit decoded pixel dimensions, allowing an authenticated user to submit a small PNG, JPEG, or GIF that triggers an unbounded allocation and terminates the Cloudreve process through fatal out-of-memory behavior. This issue is fixed in version 4.17.0.

References

https://github.com/cloudreve/cloudreve/security/advisories/GHSA-g9j2-8w95-3vwv exploitx_refsource_CONFIRM
https://github.com/cloudreve/cloudreve/commit/3607f79bb44c35d0be4fa8b6e24c0502b51415a9 x_refsource_MISC
https://github.com/cloudreve/cloudreve/releases/tag/4.17.0 x_refsource_MISC

Affected products

cloudreve

==< 4.17.0

Dismissed

(no matching packages found)

Permalink CVE-2026-51258

created 1 month ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month ago

None

Dismissed suggestions

References

Affected products

References

Affected products

Affected products

Affected products

References

Affected products

Affected products

References

Affected products

References

Affected products

References

Affected products

Affected products