Nixpkgs security tracker

Permalink CVE-2020-11936

3.1 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 year, 7 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 7 months ago
@fricklerhandwerk dismissed 1 year, 7 months ago

gdbus setgid privilege escalation

References

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633 issue-tracking
https://www.cve.org/CVERecord?id=CVE-2020-11936 issue-tracking

Affected products

apport

<2.20.11-0ubuntu27.6

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Round a set of numbers while maintaining its sum

nixos-unstable 0.0.0.4
- nixpkgs-unstable 0.0.0.4
- nixos-unstable-small 0.0.0.4

Package maintainers

@thielema Henning Thielemann <nix@henning-thielemann.de>

Permalink CVE-2023-0092

4.9 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 year, 7 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 7 months ago
@fricklerhandwerk dismissed 1 year, 7 months ago

An authenticated user who has read access to the juju …

An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem.

References

https://github.com/advisories/GHSA-x5rv-w9pm-8qp8 issue-tracking
https://github.com/juju/juju/commit/ef803e2a13692d355b784b7da8b4b1f01dab1556 patch

Affected products

juju

<2.9.38
<3.0.3

Matching in nixpkgs

pkgs.juju

Open source modelling tool for operating software in the cloud

nixos-unstable 3.5.4
- nixpkgs-unstable 3.5.4
- nixos-unstable-small 3.5.4

Package maintainers

@RealityAnomaly Alex Zero <alex@arctarus.co.uk>

Permalink CVE-2022-28653

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 year, 7 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 7 months ago
@fricklerhandwerk dismissed 1 year, 7 months ago

Users can consume unlimited disk space in /var/crash

References

https://www.cve.org/CVERecord?id=CVE-2022-28653 issue-tracking

Affected products

apport

<2.21.0

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Round a set of numbers while maintaining its sum

nixos-unstable 0.0.0.4
- nixpkgs-unstable 0.0.0.4
- nixos-unstable-small 0.0.0.4

Package maintainers

@thielema Henning Thielemann <nix@henning-thielemann.de>

Permalink CVE-2025-23684

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 year, 7 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 7 months ago
@fricklerhandwerk dismissed 1 year, 7 months ago

WordPress Debug Tool plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Debug Tool: from n/a through 2.2.

References

https://patchstack.com/database/wordpress/plugin/debug-tool/vulnerability/wordp… vdb-entry

Affected products

debug-tool

=<2.2

Matching in nixpkgs

Package maintainers

@yuuyins Yuu Yin <yuunix@grrlz.net>
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>

Permalink CVE-2025-23886

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 1 year, 7 months ago by @Erethon Activity log

Created suggestion 1 year, 8 months ago
@Erethon accepted 1 year, 7 months ago
@Erethon dismissed 1 year, 7 months ago

WordPress Annie plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Roberts Annie allows Stored XSS.This issue affects Annie: from n/a through 2.1.1.

References

https://patchstack.com/database/wordpress/plugin/annie/vulnerability/wordpress-… vdb-entry

Affected products

annie

=<2.1.1

Matching in nixpkgs

pkgs.wannier90

Calculation of maximally localised Wannier functions

nixos-unstable 3.1.0
- nixpkgs-unstable 3.1.0
- nixos-unstable-small 3.1.0

Package maintainers

@sheepforce Phillip Seeber <phillip.seeber@googlemail.com>

Permalink CVE-2025-23892

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 1 year, 7 months ago by @Erethon Activity log

Created suggestion 1 year, 8 months ago
@Erethon accepted 1 year, 7 months ago
@Erethon dismissed 1 year, 7 months ago

WordPress Progress Tracker plugin <= 0.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Furr and Simon Ward Progress Tracker allows DOM-Based XSS.This issue affects Progress Tracker: from n/a through 0.9.3.

References

https://patchstack.com/database/wordpress/plugin/progress-tracker/vulnerability… vdb-entry

Affected products

progress-tracker

=<0.9.3

Matching in nixpkgs

pkgs.progress-tracker

Simple kanban-style task organiser

nixos-unstable 1.6
- nixpkgs-unstable 1.6
- nixos-unstable-small 1.6

Package maintainers

@Guanran928 Guanran Wang <guanran928@outlook.com>

Permalink CVE-2022-45836

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 1 year, 7 months ago by @Erethon Activity log

Created suggestion 1 year, 8 months ago
@Erethon accepted 1 year, 7 months ago
@Erethon dismissed 1 year, 7 months ago
@Erethon accepted 1 year, 7 months ago
@Erethon dismissed 1 year, 7 months ago

WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.

References

https://patchstack.com/database/vulnerability/download-manager/wordpress-downlo… x_transferredvdb-entry

Affected products

download-manager

=<3.2.59

Matching in nixpkgs

pkgs.lomiri.lomiri-download-manager

Performs uploads and downloads from a centralized location

nixos-unstable -
- nixos-unstable-small 0.1.3

Package maintainers

@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>

Permalink CVE-2023-27456

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 1 year, 9 months ago by @LeSuisse Activity log

Created suggestion 1 year, 9 months ago
@LeSuisse dismissed 1 year, 9 months ago

WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation

Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through 2.1.19.

References

https://patchstack.com/database/wordpress/theme/total/vulnerability/wordpress-t… vdb-entry

Affected products

total

=<2.1.19

Matching in nixpkgs

pkgs.autotalent

Real-time pitch correction LADSPA plugin (no MIDI control)

nixos-unstable -
- nixos-unstable-small 0.2

pkgs.haskellPackages.total

Exhaustive pattern matching using lenses, traversals, and prisms

nixos-unstable -
- nixos-unstable-small 1.0.6

pkgs.emacsPackages.total-lines

None

nixos-unstable -
- nixos-unstable-small 20171227.1239

pkgs.haskellPackages.total-alternative

Alternative interface for total versions of partial function on the Prelude

nixos-unstable -
- nixos-unstable-small 0.1.0.1

pkgs.python311Packages.total-connect-client

Interact with Total Connect 2 alarm systems

nixos-unstable -
- nixos-unstable-small 2024.12

pkgs.python312Packages.total-connect-client

Interact with Total Connect 2 alarm systems

nixos-unstable -
- nixos-unstable-small 2024.12

pkgs.home-assistant-component-tests.totalconnect

Open source home automation that puts local control and privacy first

nixos-unstable -
- nixos-unstable-small 2024.11.3

Package maintainers

@michalrus Michal Rus <m@michalrus.com>
@Gabriella439 Gabriella Gonzalez <GenuineGabriella@gmail.com>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@Mic92 Jörg Thalheim <joerg@thalheim.io>
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
@dotlambda ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86 <nix@dotlambda.de>

Permalink CVE-2024-54245

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 1 year, 9 months ago by @LeSuisse Activity log

Created suggestion 1 year, 9 months ago
@LeSuisse dismissed 1 year, 9 months ago

WordPress Clients plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Clients allows Stored XSS.This issue affects Clients: from n/a through 1.1.4.

References

https://patchstack.com/database/wordpress/plugin/clients/vulnerability/wordpres… vdb-entry

Affected products

clients

=<1.1.4

Matching in nixpkgs

pkgs.argus-clients

Clients for ARGUS

nixos-unstable 3.0.8.3
- nixpkgs-unstable 3.0.8.3
- nixos-unstable-small 3.0.8.3

pkgs.xorg.xlsclients

None

nixos-unstable 1.1.5
- nixpkgs-unstable 1.1.5
- nixos-unstable-small 1.1.5

pkgs.haskellPackages.clientsession

Securely store session data in a client-side cookie

nixos-unstable 0.9.2.0
- nixpkgs-unstable 0.9.2.0
- nixos-unstable-small 0.9.2.0

pkgs.haskellPackages.wai-session-clientsession

Session store based on clientsession

nixos-unstable 0.1
- nixpkgs-unstable 0.1
- nixos-unstable-small 0.1

Package maintainers

@leenaars Michiel Leenaars <ml.software@leenaa.rs>

Dismissed

(no matching packages found)

Permalink CVE-2024-8698

7.7 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 3 days, 22 hours ago by @ADMIN Activity log

Created suggestion 1 year, 9 months ago
@LeSuisse accepted 1 year, 9 months ago
@ADMIN dismissed (no matching packages found) 3 days, 22 hours ago

Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

References

RHSA-2024:6878 vendor-advisoryx_refsource_REDHAT
RHSA-2024:6879 vendor-advisoryx_refsource_REDHAT
RHSA-2024:6880 vendor-advisoryx_refsource_REDHAT
RHSA-2024:6882 vendor-advisoryx_refsource_REDHAT
RHSA-2024:6886 vendor-advisoryx_refsource_REDHAT
RHSA-2024:6887 vendor-advisoryx_refsource_REDHAT
RHSA-2024:6888 vendor-advisoryx_refsource_REDHAT
RHSA-2024:6889 vendor-advisoryx_refsource_REDHAT
RHSA-2024:6890 vendor-advisoryx_refsource_REDHAT
RHSA-2024:8823 vendor-advisoryx_refsource_REDHAT
RHSA-2024:8824 vendor-advisoryx_refsource_REDHAT
RHSA-2024:8826 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-8698 vdb-entryx_refsource_REDHAT
RHBZ#2311641 issue-trackingx_refsource_REDHAT
https://github.com/keycloak/keycloak/blob/main/saml-core/src/main/java/org/keyc…

Affected products

keycloak

<25.0.5

eap8-hppc

*

eap8-log4j

*

eap8-slf4j

*

eap8-jctools

*

eap8-jgroups

*

eap8-wildfly

*

eap8-narayana

*

eap8-asyncutil

*

eap8-hibernate

*

eap8-saaj-impl

*

eap8-snakeyaml

*

eap8-apache-cxf

*

eap8-cryptacular

*

eap8-fastinfoset

*

rh-sso7-keycloak

*

eap8-aws-java-sdk

*

eap8-pem-keystore

*

eap8-aesh-readline

*

eap8-jboss-logging

*

eap8-objectweb-asm

*

eap8-artemis-native

*

rhbk/keycloak-rhel9

*

eap8-aesh-extensions

*

eap8-nimbus-jose-jwt

*

eap8-resteasy-spring

*

eap8-activemq-artemis

*

eap8-apache-commons-io

*

eap8-jboss-cert-helper

*

eap8-apache-commons-lang

*

eap8-hibernate-validator

*

eap8-resteasy-extensions

*

Red Hat Build of Keycloak

eap8-apache-commons-codec

*

eap8-insights-java-client

*

keycloak-saml-core-public

eap8-activemq-artemis-native

*

eap8-eap-product-conf-parent

*

eap8-shibboleth-java-support

*

org.keycloak-keycloak-parent

rhbk/keycloak-rhel9-operator

*

rhbk/keycloak-operator-bundle

*

rh-sso-7/sso76-openshift-rhel8

*

eap8-apache-commons-collections

*

org.keycloak/keycloak-saml-core

eap8-artemis-wildfly-integration

*

eap8-jakarta-servlet-jsp-jstl-api

*

org.keycloak/keycloak-saml-core-public

Dismissed suggestions

References

Affected products

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.juju

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python311Packages.django-debug-toolbar

pkgs.python312Packages.django-debug-toolbar

pkgs.python311Packages.django-graphiql-debug-toolbar

pkgs.python312Packages.django-graphiql-debug-toolbar

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.wannier90

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.progress-tracker

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.lomiri.lomiri-download-manager

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.autotalent

pkgs.haskellPackages.total

pkgs.emacsPackages.total-lines

pkgs.haskellPackages.total-alternative

pkgs.python311Packages.total-connect-client

pkgs.python312Packages.total-connect-client

pkgs.home-assistant-component-tests.totalconnect

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.argus-clients

pkgs.xorg.xlsclients

pkgs.haskellPackages.clientsession

pkgs.haskellPackages.wai-session-clientsession

Package maintainers

References

Affected products