NIXPKGS-2026-1877

GitHub issue published 5 hours ago

Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification

Permalink CVE-2026-47707

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  3 packages

  • strawberry
  • python313Packages.strawberry-django
  • pkgsRocm.python3Packages.strawberry-django
  6 hours ago
• @LeSuisse accepted 6 hours ago
• @LeSuisse published on GitHub 5 hours ago

Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification

• https://github.com/strawberry-graphql/strawberry/security/advisories/GHSA-fr49-mhgj-crfc x_refsource_CONFIRMexploit
• https://github.com/strawberry-graphql/strawberry/releases/tag/0.315.7 x_refsource_MISC

---

strawberry

• ==>= 0.172.0, < 0.315.7

NIXPKGS-2026-1876

GitHub issue published 5 hours ago

Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread …

Permalink CVE-2026-10305

6.1 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): Low (L)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): High (H)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored package libsForQt5.rlottie-qml 6 hours ago
• @LeSuisse accepted 6 hours ago
• @LeSuisse published on GitHub 5 hours ago

Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread …

• https://github.com/Samsung/rlottie/pull/587

---

rlottie

• ==223a2a41ba4f462e4abe767bebba49a366c9b9fd

NIXPKGS-2026-1875

GitHub issue published 5 hours ago

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped …

Permalink CVE-2026-50292

7.4 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  5 packages

  • gebaar-libinput
  • libinput-gestures
  • xf86inputlibinput
  • xf86-input-libinput
  • xlibinput-calibrator
  6 hours ago
• @LeSuisse accepted 6 hours ago
• @LeSuisse ignored maintainer @jtojnar 5 hours ago maintainer.ignore
• @LeSuisse published on GitHub 5 hours ago

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped …

• https://gitlab.freedesktop.org/libinput/libinput/-/work_items/1296 exploit
• https://gitlab.freedesktop.org/libinput/libinput/-/commit/76f0d8a7f57e286888286…
• https://www.openwall.com/lists/oss-security/2026/06/04/5

---

libinput

• <1.31.3
• <1.30.4

NIXPKGS-2026-1874

GitHub issue published 5 hours ago

LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body

Permalink CVE-2026-40930

5.4 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  3 packages

  • libpng12
  • perlPackages.ImagePNGLibpng
  • perl5Packages.ImagePNGLibpng
  5 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body

• https://github.com/pnggroup/libpng/security/advisories/GHSA-c4v6-gxrq-6g2x x_refsource_CONFIRM
• https://github.com/pnggroup/libpng/commit/faf06924688b62d7c1654b5ceddedbde66ffadb4 x_refsource_MISC
• http://www.openwall.com/lists/oss-security/2026/05/15/21

---

libpng

• === 1.8.0

libpng-apng

• ==>= 1.6.49, <= 1.6.57

NIXPKGS-2026-1873

GitHub issue published 5 hours ago

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities

Permalink CVE-2026-8829

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  2 packages

  • akkuPackages.chibi-html-parser
  • chickenPackages_5.chickenEggs.html-parser
  5 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities

• https://github.com/libwww-perl/HTML-Parser/pull/56 patch
• https://github.com/libwww-perl/HTML-Parser/commit/6922552b0778c90a9587a3894e248… patch
• http://www.openwall.com/lists/oss-security/2026/06/04/2

---

HTML-Parser

• <3.84

NIXPKGS-2026-1872

GitHub issue published 5 hours ago

zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash

Permalink CVE-2026-10812

1.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  4 references

  • https://github.com/zilliztech/GPTCache/
  • CVE-2026-10812 | CVE Analysis and Report
  • VDB-368260 | CTI Indicators (IOB, IOC, …
  • Submit #831636 | zilliztech GPTCache 0.…
  5 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash

• VDB-368260 | zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash vdb-entrytechnical-description
• https://github.com/zilliztech/GPTCache/issues/684 issue-trackingexploit
• https://github.com/zilliztech/GPTCache/pull/678 issue-trackingpatch

Ignored references (4)

• https://github.com/zilliztech/GPTCache/ product
• CVE-2026-10812 | CVE Analysis and Report third-party-advisory
• VDB-368260 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #831636 | zilliztech GPTCache 0.1.44 Cache poisoning / improper cache key generation third-party-advisory

---

GPTCache

• ==0.1.34
• ==0.1.33
• ==0.1.31
• ==0.1.5
• ==0.1.9
• ==0.1.6
• ==0.1.19
• ==0.1.28
• ==0.1.13
• ==0.1.25
• ==0.1.20
• ==0.1.16
• ==0.1.42
• ==0.1.2
• ==0.1.18
• ==0.1.23
• ==0.1.7
• ==0.1.11
• ==0.1.8
• ==0.1.0
• ==0.1.1
• ==0.1.38
• ==0.1.37
• ==0.1.27
• ==0.1.29
• ==0.1.4
• ==0.1.30
• ==0.1.14
• ==0.1.22
• ==0.1.36
• ==0.1.35
• ==0.1.41
• ==0.1.21
• ==0.1.17
• ==0.1.26
• ==0.1.10
• ==0.1.24
• ==0.1.12
• ==0.1.40
• ==0.1.3
• ==0.1.43
• ==0.1.44
• ==0.1.15
• ==0.1.39
• ==0.1.32

NIXPKGS-2026-1871

GitHub issue published 5 hours ago

Net::Statsd versions before 0.13 for Perl allow metric injections

Permalink CVE-2026-46739

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): Low (L)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): None (N)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

Net::Statsd versions before 0.13 for Perl allow metric injections

• https://github.com/cosimo/perl5-net-statsd/pull/10 issue-tracking
• https://www.cve.org/CVERecord?id=CVE-2026-46719 related
• https://www.cve.org/CVERecord?id=CVE-2026-46720 related

---

Net-Statsd

• <0.13

NIXPKGS-2026-1870

GitHub issue published 5 hours ago

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

Permalink CVE-2026-10805

6.7 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  20 packages

  • networkmanager-ssh
  • networkmanager_strongswan
  • networkmanager-fortisslvpn
  • networkmanager-openconnect
  • kdePackages.networkmanager-qt
  • mobile-broadband-provider-info
  • python313Packages.sdbus-networkmanager
  • python314Packages.sdbus-networkmanager
  • haskellPackages.amazonka-networkmanager
  • python313Packages.mypy-boto3-networkmanager
  • python314Packages.mypy-boto3-networkmanager
  • python313Packages.types-aiobotocore-networkmanager
  • networkmanager-vpnc
  • networkmanager_dmenu
  • networkmanager-iodine
  • networkmanager-openvpn
  • networkmanager-strongswan
  • networkmanager-sstp
  • networkmanagerapplet
  • networkmanager-l2tp
  5 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

• https://access.redhat.com/security/cve/CVE-2026-10805 vdb-entryx_refsource_REDHAT
• RHBZ#2484613 issue-trackingx_refsource_REDHAT

---

NetworkManager

networkmanager

network-manager-applet

NetworkManager-openswan

NetworkManager-libreswan

mobile-broadband-provider-info

redhat-user-workloads/art-images

openshift4/ose-ovn-kubernetes-rhel9

openshift4/kubernetes-nmstate-rhel8-operator

openshift4/kubernetes-nmstate-rhel9-operator

openshift4/ose-ovn-kubernetes-microshift-rhel9

openshift4/ose-kubernetes-nmstate-handler-rhel8

openshift4/ose-kubernetes-nmstate-handler-rhel9

openshift4/ose-aws-cluster-api-controllers-rhel8

openshift4/ose-aws-cluster-api-controllers-rhel9

multicluster-engine/cluster-api-provider-aws-rhel9

NIXPKGS-2026-1869

GitHub issue published 5 hours ago

Streamlit Palette hashing.py weak hash

Permalink CVE-2026-10804

1.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  4 references

  • VDB-368253 | CTI Indicators (IOB, IOC, …
  • CVE-2026-10804 | CVE Analysis and Report
  • Submit #831508 | streamlit 1.53.0 hash …
  • https://github.com/streamlit/streamlit/
  5 hours ago
• @LeSuisse ignored
  14 packages

  • python313Packages.streamlit-card
  • python314Packages.streamlit-card
  • python313Packages.streamlit-avatar
  • python313Packages.streamlit-folium
  • python313Packages.streamlit-notify
  • python314Packages.streamlit-avatar
  • python314Packages.streamlit-folium
  • python314Packages.streamlit-notify
  • python313Packages.streamlit-echarts
  • python314Packages.streamlit-echarts
  • python313Packages.streamlit-kpi-card
  • python314Packages.streamlit-kpi-card
  • python313Packages.extra-streamlit-components
  • python314Packages.extra-streamlit-components
  5 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

Streamlit Palette hashing.py weak hash

• VDB-368253 | Streamlit Palette hashing.py weak hash vdb-entry
• https://github.com/streamlit/streamlit/issues/14622 issue-trackingexploit
• https://github.com/streamlit/streamlit/pull/14635 issue-trackingpatch

Ignored references (4)

• VDB-368253 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• CVE-2026-10804 | CVE Analysis and Report third-party-advisory
• Submit #831508 | streamlit 1.53.0 hash collision third-party-advisory
• https://github.com/streamlit/streamlit/ product

---

Streamlit

• ==1.18
• ==1.7
• ==1.48
• ==1.41
• ==1.52
• ==1.20
• ==1.43
• ==1.30
• ==1.53.0
• ==1.35
• ==1.45
• ==1.34
• ==1.11
• ==1.19
• ==1.24
• ==1.50
• ==1.40
• ==1.47
• ==1.8
• ==1.29
• ==1.51
• ==1.46
• ==1.1
• ==1.32
• ==1.4
• ==1.13
• ==1.16
• ==1.3
• ==1.26
• ==1.6
• ==1.39
• ==1.21
• ==1.36
• ==1.0
• ==1.25
• ==1.27
• ==1.9
• ==1.14
• ==1.2
• ==1.22
• ==1.33
• ==1.10
• ==1.5
• ==1.42
• ==1.37
• ==1.31
• ==1.28
• ==1.44
• ==1.12
• ==1.38
• ==1.15
• ==1.17
• ==1.49
• ==1.23

NIXPKGS-2026-1868

GitHub issue published 5 hours ago

ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on …

Permalink CVE-2026-50031

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 5 hours ago by @LeSuisse Activity log

• Created suggestion 1 day, 10 hours ago
• @LeSuisse accepted 5 hours ago
• @LeSuisse published on GitHub 5 hours ago

ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on …

• https://savannah.gnu.org/bugs/index.php?68363
• https://savannah.gnu.org/bugs/index.php?68364
• https://lists.gnu.org/archive/html/info-gnu/2026-06/msg00000.html

---

FreeIPMI

• <1.6.18