Nixpkgs security tracker

Dismissed

(no matching packages found)

Permalink CVE-2026-14649

6.9 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): Low (L)
Vulnerable System Impact Availability (VA): Low (L)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Exploit Maturity (E): Not Defined (X)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): Low (L)
Modified Vulnerable System Impact Availability (MVA): Low (L)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

code-projects Online Voting System saveVote.php test_input sql injection

A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulation of the argument voterName/voterEmail/voterID/selectedCandidate results in sql injection. The attack can be initiated remotely.

References

VDB-376162 | code-projects Online Voting System saveVote.php test_input sql injection vdb-entrytechnical-description
VDB-376162 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
CVE-2026-14649 | CVE Analysis and Report third-party-advisory
Submit #846330 | code-projects Online Voting System in PHP 1.0 SQL Injection third-party-advisory
https://gist.github.com/c4ttr4ck/a29b2238099fa07b4f072c21123b55ef related
https://code-projects.org/ product

Affected products

Online Voting System

==1.0

Dismissed

(no matching packages found)

Permalink CVE-2026-14657

2.1 LOW

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): Low (L)
Vulnerable System Impact Availability (VA): Low (L)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Exploit Maturity (E): POC (P)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): Low (L)
Modified Vulnerable System Impact Availability (MVA): Low (L)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

code-projects Assessment Management Database Query marking-scheme.php sql injection

A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This manipulation of the argument squestions[] causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.

References

VDB-376172 | code-projects Assessment Management Database Query marking-scheme.php sql injection technical-descriptionvdb-entry
VDB-376172 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
CVE-2026-14657 | CVE Analysis and Report third-party-advisory
Submit #846716 | Assessment Management System lecturer/marking-scheme.php SQL Injection Vulnerability v1.0 SQL Injection third-party-advisory
https://github.com/zzzxc643/CVE1/blob/main/assessment/vul5.md exploit
https://code-projects.org/ product

Affected products

Assessment Management

==1.0

Dismissed

(no matching packages found)

Permalink CVE-2026-12196

8.3 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): High (H)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): High (H)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

HestiaCP Admin Takeover

HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaCP management scripts with passwordless sudo. This could result in the takeover of administrator users in the application and the underlying webserver.

References

Affected products

hestiacp

<8be23943c7e3231f66d226ca931c76f93be98412

Dismissed

(no matching packages found)

Permalink CVE-2025-71366

7.6 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): None (N)
User Interaction (UI): Passive (P)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Passive (P)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile

picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to bypass safety checks. Remote attackers can embed undetected code in pickle files to achieve arbitrary code execution when victims load the files.

References

GitHub Security Advisory (GHSA-4r9r-ch6f-vxmx) vendor-advisory
VulnCheck Advisory: picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile third-party-advisory

Affected products

picklescan

==0.0.28
<0.0.28

Dismissed

(no matching packages found)

Permalink CVE-2026-20706

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

Gitea repository archive downloads bypass token scope checks

Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint.

References

GitHub Security Advisory vendor-advisory
GitHub Pull Request #37735 patch
Gitea v1.26.2 Release release-notes
Gitea v1.26.2 Release Blog Post release-notes

Affected products

Gitea Open Source Git Server

=<1.26.1

Dismissed

(no matching packages found)

Permalink CVE-2026-25782

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

Gitea tracked-time deletion can target entries from another issue

Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue.

References

GitHub Pull Request #36664 patch
GitHub Pull Request #36689 patch
Gitea v1.25.5 Release release-notes
Gitea v1.25.5 Release Blog Post release-notes

Affected products

Gitea Open Source Git Server

<1.25.5

Dismissed

(no matching packages found)

Permalink CVE-2026-26292

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

Gitea LFS mirror synchronization bypasses migration HTTP transport restrictions

Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing the configured migration transport protections for those LFS requests.

References

GitHub Pull Request #36665 patch
GitHub Pull Request #36691 patch
Gitea v1.25.5 Release release-notes
Gitea v1.25.5 Release Blog Post release-notes

Affected products

Gitea Open Source Git Server

<1.25.5

Dismissed

(no matching packages found)

Permalink CVE-2026-22547

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

Gitea repository creation accepts invalid field values

Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.

References

GitHub Pull Request #36671 patch
GitHub Pull Request #36757 patch
Gitea v1.25.5 Release release-notes
Gitea v1.25.5 Release Blog Post release-notes

Affected products

Gitea Open Source Git Server

<1.25.5

Dismissed

(max. allowed matches exceeded)

Permalink CVE-2026-9546

created 1 month, 3 weeks ago Activity log

Created & dismissed (max. allowed matches exceeded) suggestion 1 month, 3 weeks ago

sending old referer

A vulnerability in libcurl caused the HTTP `Referer:` header to persist even when explicitly cleared. While the documentation states that passing NULL to `CURLOPT_REFERER` suppresses the header, the option failed to clear the internal state. As a result the previous referrer string was erroneously reused and sent in subsequent requests, potentially leaking sensitive information to unintended servers.

References

Affected products

curl

=<8.20.0
=<8.18.0
=<8.19.0

Dismissed

(no matching packages found)

Permalink CVE-2026-27783

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 3 weeks ago Activity log

Created & dismissed (no matching packages found) suggestion 1 month, 3 weeks ago

Gitea issue-template APIs bypass repository unit authorization

Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.

References

GitHub Security Advisory vendor-advisory
GitHub Pull Request #37769 patch
GitHub Pull Request #37781 patch
Gitea v1.26.2 Release release-notes
Gitea v1.26.2 Release Blog Post release-notes

Affected products

Gitea Open Source Git Server

=<1.26.1

Dismissed suggestions

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products