NIXPKGS-2026-2696

GitHub issue published 5 hours ago

Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition

Permalink CVE-2026-91203

6.0 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 2 days, 15 hours ago
• @Scrumplex accepted 2 days, 9 hours ago
• @LeSuisse published on GitHub 5 hours ago

Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition

• https://access.redhat.com/security/cve/CVE-2026-91203 vdb-entryx_refsource_REDHAT
• RHBZ#2465632 issue-trackingx_refsource_REDHAT

---

cockpit-files

NIXPKGS-2026-2695

GitHub issue published 5 hours ago

Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

Permalink CVE-2026-93992

7.0 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Active (A)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Active (A)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 15 hours ago
• @LeSuisse accepted 1 day, 9 hours ago
• @LeSuisse published on GitHub 5 hours ago

Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

• GitHub Issue #1525 issue-tracking
• https://github.com/GopeedLab/gopeed/commit/38750d8505274e55cf11aa77f0694c71dd82… patch
• 7z extraction sink at v1.9.3 technical-description
• extractFile directory sink at v1.9.3 technical-description
• https://github.com/GopeedLab/gopeed product
• VulnCheck Advisory: Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal third-party-advisory

---

gopeed

• =<2.0.0-beta.3

NIXPKGS-2026-2694

GitHub issue published 5 hours ago

Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector

Permalink CVE-2026-93991

8.3 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 15 hours ago
• @LeSuisse accepted 1 day, 9 hours ago
• @LeSuisse published on GitHub 5 hours ago

Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector

• GitHub Security Advisory (GHSA-q65w-j2vp-47c4) vendor-advisory
• https://github.com/argoproj/argo-workflows/commit/a40972386c097ddf816d2e60e13f0… patch
• argo-workflows v4.1.4 Release Notes release-notes
• https://github.com/argoproj/argo-workflows product
• VulnCheck Advisory: Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector third-party-advisory

---

argo-workflows

• <4.1.4

NIXPKGS-2026-2693

GitHub issue published 5 hours ago

vLLM through 0.29.0 Cross-Request Logits Corruption via bad_words

Permalink CVE-2026-93989

2.3 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Attack Requirement (AT): Present (P)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Attack Requirement (MAT): Present (P)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 15 hours ago
• @LeSuisse accepted 1 day, 9 hours ago
• @LeSuisse published on GitHub 5 hours ago

vLLM through 0.29.0 Cross-Request Logits Corruption via bad_words

• GitHub PR #48824 issue-trackingpatch
• _bad_words_kernel at v0.29.0 technical-description
• update_from_tokenizer at v0.29.0 technical-description
• https://github.com/vllm-project/vllm product
• VulnCheck Advisory: vLLM through 0.29.0 Cross-Request Logits Corruption via bad_words third-party-advisory

---

vllm

• =<0.29.0

NIXPKGS-2026-2692

GitHub issue published 5 hours ago

DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM

Permalink CVE-2026-78030

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 15 hours ago
• @LeSuisse ignored
  11 packages

  • libdbi
  • mmdbinspect
  • dbip-asn-lite
  • libdbiDrivers
  • dbip-city-lite
  • libdbi-drivers
  • perlPackages.DBI
  • dbip-country-lite
  • perl5Packages.DBIxClassSchemaLoader
  • perl5Packages.DBIxClassCursorCached
  • perlPackages.DBIxClassSchemaLoader
  1 day, 9 hours ago
• @LeSuisse restored package perlPackages.DBI 1 day, 9 hours ago
• @LeSuisse ignored
  65 packages

  • perl5Packages.DBIxSearchBuilder
  • luajitPackages.luadbi-postgresql
  • perlPackages.DBIxClassHTMLWidget
  • perl5Packages.DBIxClassHTMLWidget
  • perlPackages.DBIxClassCursorCached
  • perlPackages.CatalystModelDBICSchema
  • perlPackages.DBIxClassDynamicDefault
  • perl5Packages.CatalystModelDBICSchema
  • perl5Packages.DBIxClassDynamicDefault
  • gnomeExtensions.cryptogoldbitcoin-rate
  • perlPackages.DBIxClassIntrospectableM2M
  • perl5Packages.DBIxClassIntrospectableM2M
  • perlPackages.DBIxClassInflateColumnSerializer
  • perl5Packages.DBIxClassInflateColumnSerializer
  • perlPackages.CatalystAuthenticationStoreDBIxClass
  • perl5Packages.CatalystAuthenticationStoreDBIxClass
  • sbclPackages.dbi
  • libdbiDriversBase
  • perl5Packages.DBI
  • luaPackages.luadbi
  • libdbi-drivers-base
  • sbclPackages.cl-dbi
  • lua51Packages.luadbi
  • lua52Packages.luadbi
  • lua53Packages.luadbi
  • lua54Packages.luadbi
  • luajitPackages.luadbi
  • sbclPackages.dbi-test
  • perlPackages.DBIxClass
  • haskellPackages.FindBin
  • haskellPackages.monadbi
  • perl5Packages.DBIxClass
  • perlPackages.DBIxSimple
  • luaPackages.luadbi-mysql
  • perl5Packages.DBIxSimple
  • perlPackages.DBIxDBSchema
  • lua51Packages.luadbi-mysql
  • lua52Packages.luadbi-mysql
  • lua53Packages.luadbi-mysql
  • lua54Packages.luadbi-mysql
  • luaPackages.luadbi-sqlite3
  • perl5Packages.DBIxDBSchema
  • perlPackages.DBIxConnector
  • haskellPackages.OrderedBits
  • luajitPackages.luadbi-mysql
  • perl5Packages.DBIxConnector
  • perlPackages.DBIxClassCandy
  • lua51Packages.luadbi-sqlite3
  • lua52Packages.luadbi-sqlite3
  • lua53Packages.luadbi-sqlite3
  • lua54Packages.luadbi-sqlite3
  • perl5Packages.DBIxClassCandy
  • luaPackages.luadbi-postgresql
  • luajitPackages.luadbi-sqlite3
  • perlPackages.DBIxClassHelpers
  • perlPackages.DBIxIntrospector
  • perl5Packages.DBIxClassHelpers
  • perl5Packages.DBIxIntrospector
  • perlPackages.DBICxTestDatabase
  • perlPackages.DBIxSearchBuilder
  • lua51Packages.luadbi-postgresql
  • lua52Packages.luadbi-postgresql
  • lua53Packages.luadbi-postgresql
  • lua54Packages.luadbi-postgresql
  • perl5Packages.DBICxTestDatabase
  1 day, 9 hours ago
• @LeSuisse accepted 1 day, 9 hours ago
• @LeSuisse published on GitHub 5 hours ago

DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM

• https://metacpan.org/release/HMBRAND/DBI-1.653/changes release-notes
• https://github.com/perl5-dbi/dbi/commit/315c6ce703b8b3cbe9188062d9ec80730293554… patch
• https://github.com/perl5-dbi/dbi/security/advisories/GHSA-wqmw-wqwx-3fr7 vendor-advisory
• http://www.openwall.com/lists/oss-security/2026/09/19/4

---

DBI

• <1.653

NIXPKGS-2026-2691

GitHub issue published 5 hours ago

Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout

Permalink CVE-2026-93993

8.6 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Active (A)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Active (A)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 15 hours ago
• @LeSuisse accepted 1 day, 9 hours ago
• @LeSuisse published on GitHub 5 hours ago

Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout

• GitHub Issue #996 issue-tracking
• https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40a… patch
• mistral-vibe v2.25.5 Release Notes release-notes
• add_worktree at v2.25.4 technical-description
• https://github.com/mistralai/mistral-vibe product
• VulnCheck Advisory: Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout third-party-advisory

---

mistral-vibe

• <2.25.5

NIXPKGS-2026-2689

GitHub issue published 5 hours ago

mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery

Permalink CVE-2026-94028

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 15 hours ago
• @LeSuisse ignored
  2 packages

  • python313Packages.aiomealie
  • python314Packages.aiomealie
  5 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery

• VDB-407957 | mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery technical-descriptionvdb-entry
• VDB-407957 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• CVE-2026-94028 | CVE Analysis and Report third-party-advisory
• Submit #945043 | mealie-recipes mealie commit 642c826 Server-Side Request Forgery third-party-advisory
• https://github.com/mealie-recipes/mealie/issues/7831 issue-trackingexploit
• https://github.com/mealie-recipes/mealie/pull/7914 issue-trackingpatch
• https://github.com/mealie-recipes/mealie/commit/fb221afa258c8dd2c4ac95b1996c33e… patch
• https://github.com/mealie-recipes/mealie/releases/tag/v3.26.0 patch
• https://github.com/mealie-recipes/mealie/ product

---

Mealie

• ==3.25.1
• ==3.26.0
• ==3.25.0

NIXPKGS-2026-2690

GitHub issue published 5 hours ago

Free5GC Gmm handler.go race condition

Permalink CVE-2026-94043

5.5 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 15 hours ago
• @LeSuisse ignored
  2 references

  • https://github.com/free5gc/free5gc/
  • https://github.com/free5gc/amf/commit/e…
  5 hours ago
• @LeSuisse ignored
  13 packages

  • free5gc-bsf
  • free5gc-chf
  • free5gc-nef
  • free5gc-nrf
  • free5gc-pcf
  • free5gc-smf
  • free5gc-udm
  • free5gc-udr
  • free5gc-upf
  • free5gc-ausf
  • free5gc-nssf
  • free5gc-tngf
  • free5gc-n3iwf
  5 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

Free5GC Gmm handler.go race condition

• VDB-407972 | Free5GC Gmm handler.go race condition vdb-entry
• VDB-407972 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-94043 | CVE Analysis and Report third-party-advisory
• Submit #949261 | N/A Free5GC <=4.2.3 Race Condition third-party-advisory
• https://github.com/free5gc/free5gc/issues/1109 issue-tracking
• https://github.com/free5gc/amf/pull/238 issue-trackingpatch

Ignored references (2)

• https://github.com/free5gc/free5gc/ product
• https://github.com/free5gc/amf/commit/e323b01464355781b8b8d5dd695e05cbc00a62f2 patch

---

Free5GC

• ==4.2.0
• ==4.2.2
• ==4.2.3
• ==4.2.1

NIXPKGS-2026-2688

GitHub issue published 5 hours ago

Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

Permalink CVE-2026-93960

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 15 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

• VDB-407919 | Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication technical-descriptionvdb-entry
• VDB-407919 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-93960 | CVE Analysis and Report third-party-advisory
• Submit #944207 | pixelfed commit f0ac4aa Missing Authentication third-party-advisory
• https://github.com/pixelfed/pixelfed/issues/6643 exploitissue-tracking
• https://github.com/pixelfed/pixelfed/pull/6774 patchissue-tracking
• https://github.com/pixelfed/pixelfed/commit/68dca5097305fa0065d029587b223352463… patch
• https://github.com/pixelfed/pixelfed/releases/tag/v0.12.10 patch
• https://github.com/pixelfed/pixelfed/ product

---

Pixelfed

• ==0.12.9
• ==0.12.2
• ==0.12.1
• ==0.12.10
• ==0.12.8
• ==0.12.0
• ==0.12.6
• ==0.12.10
• ==0.12.7
• ==0.12.4
• ==0.12.3
• ==0.12.5
• ==0.12.11

NIXPKGS-2026-2687

GitHub issue published 5 hours ago

DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization

Permalink CVE-2026-94093

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 15 hours ago
• @LeSuisse ignored reference https://g… 5 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization

• VDB-408021 | DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization technical-descriptionvdb-entry
• VDB-408021 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-94093 | CVE Analysis and Report third-party-advisory
• Submit #952734 | DLR-RM stable-baselines3 v2.9.0 rce third-party-advisory
• https://github.com/DLR-RM/stable-baselines3/issues/2281 issue-tracking

Ignored references (1)

• https://github.com/DLR-RM/stable-baselines3/ product

---

stable-baselines3

• ==2.3
• ==2.8
• ==2.7
• ==2.1
• ==2.9.0
• ==2.2
• ==2.6
• ==2.0
• ==2.5
• ==2.4