Nixpkgs security tracker

Dismissed

(no matching packages found)

Permalink CVE-2026-38343

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 …

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file.

References

https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21587

Affected products

n/a

==n/a

Dismissed

(no matching packages found)

Permalink CVE-2023-42430

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

None

Affected products

Dismissed

(no matching packages found)

Permalink CVE-2026-59274

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

Unbounded decompression in UnZipTransformer enables zip-bomb DoS

The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12

References

https://spring.io/security/cve-2026-59274

Affected products

Spring Integration

=<7.0.5
=<6.4.12
=<6.5.10
==7.1.0

Dismissed

(no matching packages found)

Permalink CVE-2026-47845

5.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

Reactor Netty HTTP Server may incorrectly evaluate proxy addresses

In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the application must be configured to use HAProxy Protocol. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

References

https://spring.io/security/cve-2026-47845

Affected products

Reactor Netty

=<1.3.6
=<1.2.18
=<1.0.52

Dismissed

(no matching packages found)

Permalink CVE-2026-38345

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg …

A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

References

https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21585

Affected products

n/a

==n/a

Dismissed

(no matching packages found)

Permalink CVE-2026-37071

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function …

Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected endpoint renaming the application configuration file and triggering a rebuild of configuration and resetting super administrator credentials to default values.

References

Affected products

n/a

==n/a

Dismissed

(no matching packages found)

Permalink CVE-2026-47856

6.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

JsonToObjectTransformer resolves the json__TypeId__ message header to an arbitrary class without an allow-list

Spring Integration's JSON to object conversion uses the json__TypeId__ header to choose the deserialization target type, and resolves that header value to a class with ClassUtils.forName and no type/package allow-list. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

References

https://spring.io/security/cve-2026-47856

Affected products

Spring Integration

=<7.0.5
==7.1.0
=<6.4.12
=<5.5.21
=<6.5.10

Dismissed

(no matching packages found)

Permalink CVE-2026-75813

8.7 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

Ebyte NE2-D11 Missing Authorization

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality.

References

Affected products

Ebyte NE2-D11 Firmware

==FW-9167-0-11

Dismissed

(no matching packages found)

Permalink CVE-2026-81847

2.0 LOW

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): Passive (P)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): Low (L)
Vulnerable System Impact Availability (VA): Low (L)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Exploit Maturity (E): POC (P)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Passive (P)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): Low (L)
Modified Vulnerable System Impact Availability (MVA): Low (L)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save_pipeline/load_pipeline of the file pipeline_tools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named c93ef45cba75295eba26d9ff1ffb9202a91c6150. To fix this issue, it is recommended to deploy a patch.

References

VDB-396172 | MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal vdb-entrytechnical-description
VDB-396172 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
CVE-2026-81847 | CVE Analysis and Report third-party-advisory
Submit #887255 | MAA-AI MaaMCP <= 1.1.1.dev6+g2e4a41287 Fixed in commit bbc9f62 Path Traversal third-party-advisory
https://github.com/MAA-AI/MaaMCP/issues/31 issue-trackingexploit
https://github.com/MAA-AI/MaaMCP/issues/32 issue-tracking
https://github.com/Zeeeepa/MaaMCP/commit/c93ef45cba75295eba26d9ff1ffb9202a91c61… patch
https://github.com/MAA-AI/MaaMCP/ product

Affected products

MaaMCP

==1.1.1.dev6+g2e4a41287

Dismissed

(no matching packages found)

Permalink CVE-2023-47176

created 2 weeks, 4 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 4 days ago

None

Dismissed suggestions

References

Affected products

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

Affected products