NIXPKGS-2026-2127

GitHub issue published an hour ago

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

Permalink CVE-2026-58494

6.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Changed (C)
• Confidentiality (C): None (N)
• Integrity (I): High (H)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): None (N)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse ignored
  2 packages

  • python313Packages.wasmtime
  • python314Packages.wasmtime
  2 hours ago
• @LeSuisse accepted 2 hours ago
• @LeSuisse published on GitHub an hour ago

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4ch3-9j33-3pmj x_refsource_CONFIRM
• https://github.com/bytecodealliance/wasmtime/commit/5ddfd5f1ef28f2041fa07d237ad0336e167b0e0c x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/commit/7db94cdcf0c79cb3dfde884b534b653f2dd83367 x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/commit/8a250aac0962ca1364b5f16525720e9d0b39edcd x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/commit/d3ceb56ec35f39e02496eeb4e2d9c7f4fb964d9e x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/releases/tag/v24.0.11 x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/releases/tag/v36.0.12 x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/releases/tag/v45.0.3 x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/releases/tag/v46.0.1 x_refsource_MISC

---

wasmtime

• ==>= 25.0.0, < 36.0.12
• ==>= 46.0.0, < 46.0.1
• ==>= 37.0.0, < 45.0.3
• ==< 24.0.11

NIXPKGS-2026-2126

GitHub issue published an hour ago

bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

Permalink CVE-2026-15035

1.9 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse ignored
  4 references

  • https://github.com/bentoml/OpenLLM/
  • Submit #850895 | Bentoml OpenLLM 0.6.30…
  • CVE-2026-15035 | CVE Analysis and Report
  • VDB-376786 | CTI Indicators (IOB, IOC, …
  2 hours ago
• @LeSuisse accepted 2 hours ago
• @LeSuisse published on GitHub an hour ago

bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

• VDB-376786 | bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection technical-descriptionvdb-entry
• https://github.com/bentoml/OpenLLM/issues/1229 exploitissue-tracking
• https://github.com/bentoml/OpenLLM/pull/1235 patchissue-tracking

Ignored references (4)

• https://github.com/bentoml/OpenLLM/ product
• Submit #850895 | Bentoml OpenLLM 0.6.30 Command Injection third-party-advisory
• CVE-2026-15035 | CVE Analysis and Report third-party-advisory
• VDB-376786 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature

---

OpenLLM

• ==0.6.30

NIXPKGS-2026-2125

GitHub issue published an hour ago

etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation

Permalink CVE-2026-59818

6.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): High (H)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): None (N)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse ignored
  20 packages

  • netcdf
  • pnetcdf
  • netcdf-mpi
  • netcdfcxx4
  • netcdffortran
  • pkgsRocm.pnetcdf
  • pkgsRocm.netcdf-mpi
  • octavePackages.netcdf
  • python313Packages.etcd
  • python314Packages.etcd
  • python313Packages.aetcd
  • python313Packages.etcd3
  • python314Packages.aetcd
  • python314Packages.etcd3
  • python313Packages.netcdf4
  • python314Packages.netcdf4
  • python313Packages.h5netcdf
  • python314Packages.h5netcdf
  • python313Packages.python-etcd
  • python314Packages.python-etcd
  2 hours ago
• @LeSuisse accepted 2 hours ago
• @LeSuisse published on GitHub an hour ago

etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation

• https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92 x_refsource_CONFIRM
• https://github.com/etcd-io/etcd/pull/22007 x_refsource_MISC
• https://github.com/etcd-io/etcd/pull/22021 x_refsource_MISC
• https://github.com/etcd-io/etcd/pull/22025 x_refsource_MISC
• https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef x_refsource_MISC
• https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f x_refsource_MISC
• https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb x_refsource_MISC
• https://github.com/etcd-io/etcd/releases/tag/v3.5.32 x_refsource_MISC
• https://github.com/etcd-io/etcd/releases/tag/v3.6.13 x_refsource_MISC

---

etcd

• ==>= 3.6.0-alpha.0, < 3.6.13
• ==< 3.5.32

NIXPKGS-2026-2124

GitHub issue published an hour ago

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

Permalink CVE-2026-59939

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse ignored
  2 packages

  • python313Packages.google-auth-httplib2
  • python314Packages.google-auth-httplib2
  2 hours ago
• @LeSuisse accepted 2 hours ago
• @LeSuisse published on GitHub an hour ago

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

• https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3 x_refsource_CONFIRM
• https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427 x_refsource_MISC
• https://github.com/httplib2/httplib2/releases/tag/v0.32.0 x_refsource_MISC

---

httplib2

• ==< 0.32.0

NIXPKGS-2026-2123

GitHub issue published an hour ago

Snipe-IT's selectlist visibility is too permissive

Permalink CVE-2026-48492

4.9 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Unreported (U)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse accepted 2 hours ago
• @LeSuisse published on GitHub an hour ago

Snipe-IT's selectlist visibility is too permissive

• https://github.com/grokability/snipe-it/security/advisories/GHSA-f3c5-6cw8-fg57 x_refsource_CONFIRM
• https://github.com/grokability/snipe-it/commit/4f943d4a7ab8e53f3d9e32770602d1118bab005f x_refsource_MISC

---

snipe-it

• ==< 8.5.1

NIXPKGS-2026-2122

GitHub issue published an hour ago

Heap-based Buffer Overflow in Wireshark

Permalink CVE-2026-15173

4.7 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse accepted an hour ago
• @LeSuisse published on GitHub an hour ago

Heap-based Buffer Overflow in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-53.html
• https://gitlab.com/wireshark/wireshark/-/work_items/21285

---

Wireshark

• <4.6.7

NIXPKGS-2026-2121

GitHub issue published an hour ago

ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

Permalink CVE-2026-44512

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse ignored
  39 packages

  • onnxruntime
  • sherpa-onnx
  • pkgsRocm.onnxruntime
  • pkgsRocm.sherpa-onnx
  • python313Packages.onnx
  • python314Packages.onnx
  • python313Packages.onnx-ir
  • python313Packages.tf2onnx
  • python314Packages.onnx-ir
  • python313Packages.onnx-asr
  • python313Packages.onnxslim
  • python313Packages.skl2onnx
  • python314Packages.onnx-asr
  • python314Packages.onnxslim
  • python314Packages.skl2onnx
  • python313Packages.onnxscript
  • python314Packages.onnxscript
  • python313Packages.onnxmltools
  • python313Packages.onnxruntime
  • python313Packages.sherpa-onnx
  • python314Packages.onnxmltools
  • python314Packages.onnxruntime
  • python314Packages.sherpa-onnx
  • python313Packages.optimum-onnx
  • python314Packages.optimum-onnx
  • pkgsRocm.python3Packages.onnx-ir
  • pkgsRocm.python3Packages.tf2onnx
  • pkgsRocm.python3Packages.onnx-asr
  • pkgsRocm.python3Packages.onnxscript
  • python313Packages.onnxruntime-tools
  • python314Packages.onnxruntime-tools
  • pkgsRocm.python3Packages.onnxruntime
  • pkgsRocm.python3Packages.sherpa-onnx
  • pkgsRocm.python3Packages.optimum-onnx
  • python313Packages.onnxconverter-common
  • python313Packages.rapidocr-onnxruntime
  • python314Packages.onnxconverter-common
  • python314Packages.rapidocr-onnxruntime
  • pkgsRocm.python3Packages.rapidocr-onnxruntime
  an hour ago
• @LeSuisse accepted an hour ago
• @LeSuisse published on GitHub an hour ago

ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

• https://github.com/onnx/onnx/security/advisories/GHSA-hwpq-hmq9-wj77 x_refsource_CONFIRM
• https://github.com/onnx/onnx/pull/7813 x_refsource_MISC
• https://github.com/onnx/onnx/commit/cd310408165ad47c3cd7eb2b86cb5b80aa2e4fdf x_refsource_MISC
• https://github.com/onnx/onnx/releases/tag/v1.22.0 x_refsource_MISC

---

onnx

• ==>= 1.9.0, < 1.22.0

NIXPKGS-2026-2120

GitHub issue published an hour ago

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Permalink CVE-2026-14454

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse ignored
  10 packages

  • imager
  • usbimager
  • vcdimager
  • rpi-imager
  • gImageReader
  • gimagereader
  • gImageReader-qt
  • gimagereader-qt
  • perlPackages.ImagerQRCode
  • perl5Packages.ImagerQRCode
  an hour ago
• @LeSuisse accepted an hour ago
• @LeSuisse published on GitHub an hour ago

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

• https://metacpan.org/release/TONYC/Imager-1.033/changes release-notes
• https://github.com/tonycoz/imager/commit/06f01a5d0fd591259aeba589370d6888384a6b… patch
• http://www.openwall.com/lists/oss-security/2026/07/08/6

---

Imager

• <1.033

NIXPKGS-2026-2119

GitHub issue published an hour ago

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

Permalink CVE-2026-59822

8.8 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse accepted an hour ago
• @LeSuisse published on GitHub an hour ago

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

• https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q x_refsource_CONFIRM
• https://github.com/BerriAI/litellm/pull/26463 x_refsource_MISC
• https://github.com/BerriAI/litellm/commit/73869f0faf7d11ee21adcb5f91b8c33a340b6c2c x_refsource_MISC
• https://github.com/BerriAI/litellm/releases/tag/v1.84.0 x_refsource_MISC

---

litellm

• ==< 1.84.0

Needs some backports to stable

NIXPKGS-2026-2118

GitHub issue published an hour ago

RestrictedPython guard hooks can be shadowed via positional-only arguments

Permalink CVE-2026-55830

8.3 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): High (H)
• User Interaction (UI): Required (R)
• Scope (S): Changed (C)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): Low (L)

updated an hour ago by @LeSuisse Activity log

• Created suggestion 7 hours ago
• @LeSuisse accepted an hour ago
• @LeSuisse published on GitHub an hour ago

RestrictedPython guard hooks can be shadowed via positional-only arguments

• https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-ffg3-p8fm-mjx2 x_refsource_CONFIRM
• https://github.com/zopefoundation/RestrictedPython/commit/3737596ec9f28c34a073cc845bd2f4c0a80cb671 x_refsource_MISC

---

RestrictedPython

• ==< 8.3