Nixpkgs security tracker

Permalink CVE-2025-1390

6.1 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 1 year, 5 months ago by @fpletz Activity log

Created suggestion 1 year, 5 months ago
@fpletz dismissed 1 year, 5 months ago

pam_cap: Fix potential configuration parsing error

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

References

https://bugzilla.openanolis.cn/show_bug.cgi?id=18804

Affected products

libcap

==2.73;0

Matching in nixpkgs

pkgs.libcap

Library for working with POSIX capabilities

nixos-unstable 2.70
- nixpkgs-unstable 2.70
- nixos-unstable-small 2.70

pkgs.libcap_ng

Library for working with POSIX capabilities

nixos-unstable 0.8.5
- nixpkgs-unstable 0.8.5
- nixos-unstable-small 0.8.5

pkgs.libcaption

Free open-source CEA608 / CEA708 closed-caption encoder/decoder

nixos-unstable 0.7
- nixpkgs-unstable 0.7
- nixos-unstable-small 0.7

Package maintainers

@pschmitt Philipp Schmitt <philipp@schmitt.co>

Permalink CVE-2025-22654

10.0 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 year, 5 months ago by @fpletz Activity log

Created suggestion 1 year, 5 months ago
@fpletz dismissed 1 year, 5 months ago

WordPress Simplified Plugin Plugin <= 1.0.6 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in kodeshpa Simplified allows Using Malicious Files. This issue affects Simplified: from n/a through 1.0.6.

References

https://patchstack.com/database/wordpress/plugin/simplified/vulnerability/wordp… vdb-entry

Affected products

simplified

=<1.0.6

Matching in nixpkgs

pkgs.gnomeExtensions.net-speed-simplified

A Net Speed extension With Loads of Customization. Fork of simplenetspeed

nixos-unstable 43
- nixpkgs-unstable 43
- nixos-unstable-small 43

pkgs.haskellPackages.phonetic-languages-simplified-base

A basics of the phonetic-languages functionality that can be groupped

nixos-unstable 0.9.0.0
- nixpkgs-unstable 0.9.0.0
- nixos-unstable-small 0.9.0.0

pkgs.haskellPackages.phonetic-languages-simplified-properties-array-common

Common functionality for 'with-tuples' and old version of properties

nixos-unstable 0.4.1.0
- nixpkgs-unstable 0.4.1.0
- nixos-unstable-small 0.4.1.0

Package maintainers

@honnip Jung seungwoo <me@honnip.page>

Permalink CVE-2025-23987

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 1 year, 5 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 5 months ago
@fricklerhandwerk dismissed 1 year, 5 months ago

WordPress Designer plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodegearThemes Designer allows DOM-Based XSS. This issue affects Designer: from n/a through 1.6.0.

References

https://patchstack.com/database/wordpress/plugin/designer/vulnerability/wordpre… vdb-entry

Affected products

designer

=<1.6.0

Matching in nixpkgs

pkgs.libsForQt5.kdesignerplugin

None

nixos-unstable 5.116.0
- nixpkgs-unstable 5.116.0
- nixos-unstable-small 5.116.0

pkgs.plasma5Packages.kdesignerplugin

None

nixos-unstable 5.116.0
- nixpkgs-unstable 5.116.0
- nixos-unstable-small 5.116.0

Package maintainers

@nyanloutre Paul Trehiou <paul@nyanlout.re>
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>

Permalink CVE-2023-1786

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 year, 5 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 5 months ago
@fricklerhandwerk dismissed 1 year, 5 months ago

sensitive data exposure in cloud-init logs

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.

References

https://github.com/canonical/cloud-init/commit/a378b7e4f47375458651c0972e7cd813… patchx_transferred
https://bugs.launchpad.net/cloud-init/+bug/2013967 issue-trackingx_transferred
https://ubuntu.com/security/notices/USN-6042-1 vendor-advisoryx_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj… x_transferred

Affected products

cloud-init

<23.1.2

Matching in nixpkgs

pkgs.cloud-init

Provides configuration and customization of cloud instance

nixos-unstable 24.2
- nixpkgs-unstable 24.2
- nixos-unstable-small 24.2

Package maintainers

@illustris Harikrishnan R <me@illustris.tech>
@jfroche Jean-François Roche <jfroche@pyxel.be>

Permalink CVE-2020-11936

3.1 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 year, 5 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 5 months ago
@fricklerhandwerk dismissed 1 year, 5 months ago

gdbus setgid privilege escalation

References

https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633 issue-tracking
https://www.cve.org/CVERecord?id=CVE-2020-11936 issue-tracking

Affected products

apport

<2.20.11-0ubuntu27.6

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Round a set of numbers while maintaining its sum

nixos-unstable 0.0.0.4
- nixpkgs-unstable 0.0.0.4
- nixos-unstable-small 0.0.0.4

Package maintainers

@thielema Henning Thielemann <nix@henning-thielemann.de>

Permalink CVE-2023-0092

4.9 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 year, 5 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 5 months ago
@fricklerhandwerk dismissed 1 year, 5 months ago

An authenticated user who has read access to the juju …

An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem.

References

https://github.com/advisories/GHSA-x5rv-w9pm-8qp8 issue-tracking
https://github.com/juju/juju/commit/ef803e2a13692d355b784b7da8b4b1f01dab1556 patch

Affected products

juju

<2.9.38
<3.0.3

Matching in nixpkgs

pkgs.juju

Open source modelling tool for operating software in the cloud

nixos-unstable 3.5.4
- nixpkgs-unstable 3.5.4
- nixos-unstable-small 3.5.4

Package maintainers

@RealityAnomaly Alex Zero <alex@arctarus.co.uk>

Permalink CVE-2022-28653

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 year, 5 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 5 months ago
@fricklerhandwerk dismissed 1 year, 5 months ago

Users can consume unlimited disk space in /var/crash

References

https://www.cve.org/CVERecord?id=CVE-2022-28653 issue-tracking

Affected products

apport

<2.21.0

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Round a set of numbers while maintaining its sum

nixos-unstable 0.0.0.4
- nixpkgs-unstable 0.0.0.4
- nixos-unstable-small 0.0.0.4

Package maintainers

@thielema Henning Thielemann <nix@henning-thielemann.de>

Permalink CVE-2025-23684

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 1 year, 5 months ago by @fricklerhandwerk Activity log

Created suggestion 1 year, 5 months ago
@fricklerhandwerk dismissed 1 year, 5 months ago

WordPress Debug Tool plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Debug Tool: from n/a through 2.2.

References

https://patchstack.com/database/wordpress/plugin/debug-tool/vulnerability/wordp… vdb-entry

Affected products

debug-tool

=<2.2

Matching in nixpkgs

Package maintainers

@yuuyins Yuu Yin <yuunix@grrlz.net>
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>

Permalink CVE-2025-23886

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 1 year, 6 months ago by @Erethon Activity log

Created suggestion 1 year, 6 months ago
@Erethon accepted 1 year, 6 months ago
@Erethon dismissed 1 year, 6 months ago

WordPress Annie plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Roberts Annie allows Stored XSS.This issue affects Annie: from n/a through 2.1.1.

References

https://patchstack.com/database/wordpress/plugin/annie/vulnerability/wordpress-… vdb-entry

Affected products

annie

=<2.1.1

Matching in nixpkgs

pkgs.wannier90

Calculation of maximally localised Wannier functions

nixos-unstable 3.1.0
- nixpkgs-unstable 3.1.0
- nixos-unstable-small 3.1.0

Package maintainers

@sheepforce Phillip Seeber <phillip.seeber@googlemail.com>

Permalink CVE-2025-23892

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 1 year, 6 months ago by @Erethon Activity log

Created suggestion 1 year, 6 months ago
@Erethon accepted 1 year, 6 months ago
@Erethon dismissed 1 year, 6 months ago

WordPress Progress Tracker plugin <= 0.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Furr and Simon Ward Progress Tracker allows DOM-Based XSS.This issue affects Progress Tracker: from n/a through 0.9.3.

References

https://patchstack.com/database/wordpress/plugin/progress-tracker/vulnerability… vdb-entry

Affected products

progress-tracker

=<0.9.3

Matching in nixpkgs

pkgs.progress-tracker

Simple kanban-style task organiser

nixos-unstable 1.6
- nixpkgs-unstable 1.6
- nixos-unstable-small 1.6

Package maintainers

@Guanran928 Guanran Wang <guanran928@outlook.com>

Dismissed suggestions

References

Affected products

Matching in nixpkgs

pkgs.libcap

pkgs.libcap_ng

pkgs.libcaption

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.gnomeExtensions.net-speed-simplified

pkgs.haskellPackages.phonetic-languages-simplified-base

pkgs.haskellPackages.phonetic-languages-simplified-properties-array-common

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.libsForQt5.kdesignerplugin

pkgs.plasma5Packages.kdesignerplugin

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.cloud-init

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.juju

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.haskellPackages.apportionment

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python311Packages.django-debug-toolbar

pkgs.python312Packages.django-debug-toolbar

pkgs.python311Packages.django-graphiql-debug-toolbar

pkgs.python312Packages.django-graphiql-debug-toolbar

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.wannier90

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.progress-tracker

Package maintainers