NIXPKGS-2026-2551

GitHub issue published 6 hours ago

An issue was discovered in the mirage-crypto-pk package before 2.3.0 …

Permalink CVE-2026-87735

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 6 hours ago by @LeSuisse Activity log

Created suggestion 17 hours ago
@LeSuisse accepted 13 hours ago
@LeSuisse published on GitHub 6 hours ago

An issue was discovered in the mirage-crypto-pk package before 2.3.0 …

https://osv.dev/vulnerability/OSEC-2026-14

mirage-crypto-pk

<2.3.0

Needs a backport to stable

NIXPKGS-2026-2550

GitHub issue published 6 hours ago

Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

          Permalink
          
            CVE-2026-87876
          
        3.0 LOW
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Adjacent (A)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): None (N)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Adjacent (A)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): None (N)
        
              updated
            
          6 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          17 hours ago
          
          @LeSuisse
          
              ignored
            
                66 packages
                apcupsd
cups-bjnp
cups-dymo
carps-cups
cups-zj-58
cups-browsed
cups-filters
cups-kyocera
cups-printers
gutenprintBin
cups-kyodialog
cups-pk-helper
gutenprint-bin
libcupsfilters
canon-cups-ufr2
cups-idprt-tspl
cups-pdf-to-pdf
cups-idprt-mt888
cups-idprt-mt890
cups-idprt-sp900
cups-idprt-barcode
brgenml1cupswrapper
mfc465cncupswrapper
cups-brother-dcpt310
cups-toshiba-estudio
dcp375cw-cupswrapper
magicard-cups-driver
mfc5890cncupswrapper
mfcj880dwcupswrapper
perlPackages.NetCUPS
dcpj785dw-cupswrapper
mfc9140cdncupswrapper
mfcj470dw-cupswrapper
mfcl2700dncupswrapper
mfcl2720dwcupswrapper
mfcl2740dwcupswrapper
perl5Packages.NetCUPS
cups-brother-dcpt720dw
cups-brother-dcpt725dw
cups-brother-hl3150cdn
cups-brother-hl3170cdw
cups-brother-mfcl2710dw
cups-brother-mfcl2800dw
cups-brother-dcp1610wlpr
python313Packages.pycups
mfcl8690cdwcupswrapper
mfcl3770cdwcupswrapper
mfcj6510dw-cupswrapper
dcp9020cdw-cupswrapper
cups-kyocera-3500-4500
cups-brother-hll2375dw
cups-brother-hll2350dw
cups-brother-hl3140cw.x86_64-linux
cups-brother-hl1110.x86_64-linux
cups-kyocera-ecosys-m552x-p502x
gnomeExtensions.apcups-monitor
prometheus-apcupsd-exporter
mfcj470dwlpr.x86_64-linux
python314Packages.pycups
cups-brother-dcpl3550cdw
cups-brother-dcpl2550dw
cups-brother-hll3230cdw.x86_64-linux
cups-brother-hl1210w.x86_64-linux
cups-brother-hl2260d.x86_64-linux
cups-brother-hll2340dw.x86_64-linux
cups-brother-mfcl2750dw

          6 hours ago
          
          @LeSuisse
          
              accepted
            
          6 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          6 hours ago
          
            Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)
          
      https://access.redhat.com/security/cve/CVE-2026-87876
    
    vdb-entryx_refsource_REDHAT
  
      RHBZ#2530991
    
    issue-trackingx_refsource_REDHAT
  
      https://github.com/OpenPrinting/cups/commit/88e67c00c130a45f3a1edf36686f7a0b298…
    
      https://github.com/OpenPrinting/cups/commit/f56844dbe4a54a9f8e1aeb3b913fbee6141…
    
      https://github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2
    
    exploit
  
    cups

    rhel9/cups

    rhcos/rhcos

NIXPKGS-2026-2549

GitHub issue published 6 hours ago

Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

          Permalink
          
            CVE-2026-87766
          
        8.8 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Changed (C)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Changed (C)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          6 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          17 hours ago
          
          @LeSuisse
          
              accepted
            
          6 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          6 hours ago
          
            Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
          
      https://access.redhat.com/security/cve/CVE-2026-87766
    
    vdb-entryx_refsource_REDHAT
  
      https://bugs.debian.org/1145655
    
      RHBZ#2530542
    
    issue-trackingx_refsource_REDHAT
  
      https://github.com/containers/bubblewrap/releases/tag/v0.12.0
    
      https://github.com/containers/bubblewrap/security/advisories/GHSA-pxhw-h44j-8pfx
    
      https://www.openwall.com/lists/oss-security/2026/08/27/7
    
      http://www.openwall.com/lists/oss-security/2026/09/09/3
    
    bubblewrap

NIXPKGS-2026-2548

GitHub issue published 6 hours ago

Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound

          Permalink
          
            CVE-2026-87875
          
        4.3 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Adjacent (A)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): None (N)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Adjacent (A)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): None (N)
        
              updated
            
          6 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          17 hours ago
          
          @LeSuisse
          
              ignored
            
                66 packages
                apcupsd
cups-bjnp
cups-dymo
carps-cups
cups-zj-58
cups-browsed
cups-filters
cups-kyocera
cups-printers
gutenprintBin
cups-kyodialog
cups-pk-helper
gutenprint-bin
libcupsfilters
canon-cups-ufr2
cups-idprt-tspl
cups-pdf-to-pdf
cups-idprt-mt888
cups-idprt-mt890
cups-idprt-sp900
cups-idprt-barcode
brgenml1cupswrapper
mfc465cncupswrapper
cups-brother-dcpt310
cups-toshiba-estudio
dcp375cw-cupswrapper
magicard-cups-driver
mfc5890cncupswrapper
mfcj880dwcupswrapper
perlPackages.NetCUPS
dcpj785dw-cupswrapper
mfc9140cdncupswrapper
mfcj470dw-cupswrapper
mfcl2700dncupswrapper
mfcl2720dwcupswrapper
mfcl2740dwcupswrapper
perl5Packages.NetCUPS
cups-brother-dcpt720dw
cups-brother-dcpt725dw
cups-brother-hl3150cdn
cups-brother-hl3170cdw
cups-brother-hll2350dw
cups-brother-hll2375dw
cups-kyocera-3500-4500
dcp9020cdw-cupswrapper
mfcj6510dw-cupswrapper
mfcl3770cdwcupswrapper
mfcl8690cdwcupswrapper
cups-brother-dcpl2550dw
cups-brother-mfcl2710dw
cups-brother-mfcl2750dw
cups-brother-mfcl2800dw
cups-brother-dcp1610wlpr
cups-brother-dcpl3550cdw
python313Packages.pycups
python314Packages.pycups
mfcj470dwlpr.x86_64-linux
prometheus-apcupsd-exporter
gnomeExtensions.apcups-monitor
cups-kyocera-ecosys-m552x-p502x
cups-brother-hl1110.x86_64-linux
cups-brother-hl1210w.x86_64-linux
cups-brother-hl2260d.x86_64-linux
cups-brother-hl3140cw.x86_64-linux
cups-brother-hll2340dw.x86_64-linux
cups-brother-hll3230cdw.x86_64-linux

          6 hours ago
          
          @LeSuisse
          
              accepted
            
          6 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          6 hours ago
          
            Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
          
      https://access.redhat.com/security/cve/CVE-2026-87875
    
    vdb-entryx_refsource_REDHAT
  
      RHBZ#2530994
    
    issue-trackingx_refsource_REDHAT
  
      https://github.com/OpenPrinting/cups/commit/0c6842fc615e8afa284136a092da8178abf…
    
      https://github.com/OpenPrinting/cups/commit/2b1dc178a2d2325135b855142e384f4e8c4…
    
      https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq
    
    exploit
  
    cups

    rhel9/cups

    rhcos/rhcos

NIXPKGS-2026-2547

GitHub issue published 6 hours ago

In the opam package before 2.5.2 for OCaml, the sandbox …

Permalink CVE-2026-57825

5.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 6 hours ago by @LeSuisse Activity log

Created suggestion 17 hours ago
@LeSuisse ignored
14 packages
- dopamine
- opam2json
- opam-publish
- opam-installer
- ocamlPackages.opam-core
- ocamlPackages.opam-state
- ocamlPackages.opam-client
- ocamlPackages.opam-format
- ocamlPackages.opam-solver
- ocamlPackages.ez_opam_file
- ocamlPackages.opam-repository
- ocamlPackages.opam-file-format
- ocamlPackages_latest.opam-core
- ocamlPackages_latest.opam-state
6 hours ago
@LeSuisse ignored reference https://g… 6 hours ago
@LeSuisse ignored
11 packages
- ocamlPackages.opam-0install-cudf
- ocamlPackages_latest.opam-client
- ocamlPackages_latest.opam-format
- ocamlPackages_latest.opam-solver
- ocamlPackages_latest.ez_opam_file
- ocamlPackages_latest.opam-repository
- ocamlPackages_latest.opam-file-format
- tree-sitter-grammars.tree-sitter-opam
- ocamlPackages_latest.opam-0install-cudf
- python313Packages.tree-sitter-grammars.tree-sitter-opam
- python314Packages.tree-sitter-grammars.tree-sitter-opam
6 hours ago
@LeSuisse accepted 6 hours ago
@LeSuisse published on GitHub 6 hours ago

In the opam package before 2.5.2 for OCaml, the sandbox …

Ignored references (1)

https://github.com/ocaml/opam/releases

opam

<2.5.2

Needs a backport

NIXPKGS-2026-2546

GitHub issue published 6 hours ago

KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size

          Permalink
          
            CVE-2026-86776
          
        4.6 MEDIUM
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Active (A)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Active (A)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          6 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          17 hours ago
          
          @LeSuisse
          
              ignored
            
                17 packages
                keepassxc
keepass-diff
keepassxc-go
keepass-keepassrpc
keepass-qrcodeview
keepass-keepasshttp
keepass-keetraytotp
keepass-charactercopy
git-credential-keepassxc
perlPackages.FileKeePass
perl5Packages.FileKeePass
python313Packages.pykeepass
python314Packages.pykeepass
python313Packages.libkeepass
python314Packages.libkeepass
python313Packages.bundlewrap-keepass
python314Packages.bundlewrap-keepass

          6 hours ago
          
          @LeSuisse
          
              accepted
            
          6 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          6 hours ago
          
            KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size
          
      Reporter write-up and proof of concept
    
    technical-descriptionexploit
  
      https://keepass.info/
    
    product
  
      KeePass 2.61.1 downloads (including source)
    
    product
  
      VulnCheck Advisory: KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size
    
    third-party-advisory
  
    KeePass

            =<2.61.1

NIXPKGS-2026-2545

GitHub issue published 6 hours ago

python3Packages.gitpython: security issues < 3.1.60

Permalink CVE-2026-87817

8.7 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): Passive (P)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Passive (P)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 6 hours ago by @LeSuisse Activity log

Created suggestion 17 hours ago
@LeSuisse accepted 6 hours ago
@LeSuisse published on GitHub 6 hours ago

GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

GitHub Security Advisory (GHSA-239g-whfq-7xj9) vendor-advisory
VulnCheck Advisory: GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation third-party-advisory

GitPython

==3.1.60
<3.1.60

          Permalink
          
            CVE-2026-78677
          
        8.7 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          6 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 weeks, 1 day ago
          
          @LeSuisse
          
              accepted
            
          6 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          6 hours ago
          
            GitPython before 3.1.59 Path Traversal via separate-git-dir
          
      GitHub Security Advisory (GHSA-8mcc-hrx5-hvxc)
    
    vendor-advisoryexploit
  
      VulnCheck Advisory: GitPython before 3.1.59 Path Traversal via separate-git-dir
    
    third-party-advisory
  
    GitPython

            ==3.1.59
          
            <3.1.59

Permalink CVE-2026-78679

7.1 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 6 hours ago by @LeSuisse Activity log

Created suggestion 2 weeks, 1 day ago
@LeSuisse accepted 6 hours ago
@LeSuisse published on GitHub 6 hours ago

GitPython before 3.1.59 Arbitrary File Read via TagReference.create

GitHub Security Advisory (GHSA-3wxw-xv34-2frg) vendor-advisory
VulnCheck Advisory: GitPython before 3.1.59 Arbitrary File Read via TagReference.create third-party-advisory

GitPython

==3.1.59
<3.1.59

          Permalink
          
            CVE-2026-78675
          
        8.6 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): High (H)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): High (H)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          6 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 weeks, 1 day ago
          
          @LeSuisse
          
              accepted
            
          6 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          6 hours ago
          
            GitPython before 3.1.59 Local File Content Disclosure via .gitmodules
          
      GitHub Security Advisory (GHSA-7833-fr7j-v32q)
    
    vendor-advisoryexploit
  
      VulnCheck Advisory: GitPython before 3.1.59 Local File Content Disclosure via .gitmodules
    
    third-party-advisory
  
    GitPython

            ==3.1.59
          
            <3.1.59

Permalink CVE-2026-78676

9.3 CRITICAL

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 6 hours ago by @LeSuisse Activity log

Created suggestion 2 weeks, 1 day ago
@LeSuisse accepted 6 hours ago
@LeSuisse published on GitHub 6 hours ago

GitPython before 3.1.59 Remote Code Execution via Config Injection

GitHub Security Advisory (GHSA-284h-m62q-gf8w) vendor-advisory
VulnCheck Advisory: GitPython before 3.1.59 Remote Code Execution via Config Injection third-party-advisory

GitPython

==3.1.59
<3.1.59

          Permalink
          
            CVE-2026-78678
          
        7.1 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          6 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 weeks, 1 day ago
          
          @LeSuisse
          
              accepted
            
          6 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          6 hours ago
          
            GitPython before 3.1.59 Arbitrary File Read via Repo.blame()
          
      GitHub Security Advisory (GHSA-5xxx-qhh7-9287)
    
    vendor-advisoryexploit
  
      VulnCheck Advisory: GitPython before 3.1.59 Arbitrary File Read via Repo.blame()
    
    third-party-advisory
  
    GitPython

            ==3.1.59
          
            <3.1.59

Permalink CVE-2026-87819

8.7 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 6 hours ago by @LeSuisse Activity log

Created suggestion 17 hours ago
@LeSuisse accepted 6 hours ago
@LeSuisse published on GitHub 6 hours ago

GitPython before 3.1.60 Denial of Service via ReDoS

GitHub Security Advisory (GHSA-g5vv-9gxw-82hx) vendor-advisory
VulnCheck Advisory: GitPython before 3.1.60 Denial of Service via ReDoS third-party-advisory

GitPython

==3.1.60
<3.1.60

Permalink CVE-2026-87818

7.1 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 6 hours ago by @LeSuisse Activity log

Created suggestion 17 hours ago
@LeSuisse accepted 6 hours ago
@LeSuisse published on GitHub 6 hours ago

GitPython 3.1.59 Local File Content Oracle via --no-index

GitHub Security Advisory (GHSA-whh4-5q6c-9v3x) vendor-advisory
VulnCheck Advisory: GitPython 3.1.59 Local File Content Oracle via --no-index third-party-advisory

GitPython

==3.1.60
<3.1.60

NIXPKGS-2026-2544

GitHub issue published 1 day, 7 hours ago

OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

Permalink CVE-2026-53938

8.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): High (H)

updated 1 day, 7 hours ago by @LeSuisse Activity log

Created suggestion 1 day, 16 hours ago
@LeSuisse accepted 1 day, 7 hours ago
@LeSuisse published on GitHub 1 day, 7 hours ago

OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj x_refsource_CONFIRM
https://github.com/OpenIDC/cjose/commit/8c51d245273583a658f24ef7b08ba22f848a34a5 x_refsource_MISC

cjose

==< 0.6.2.5

NIXPKGS-2026-2543

GitHub issue published 1 day, 7 hours ago

vgmstream txtp txtp_parser.c add_entry resource consumption

          Permalink
          
            CVE-2026-86515
          
        2.1 LOW
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Passive (P)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Exploit Maturity (E): POC (P)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Passive (P)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
              updated
            
          1 day, 7 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 16 hours ago
          
          @LeSuisse
          
              ignored
            
              package deadbeefPlugins.vgmstream
            
          1 day, 7 hours ago
          
          @LeSuisse
          
              ignored
            
              reference https://g…
            
          1 day, 7 hours ago
          
          @LeSuisse
          
              accepted
            
          1 day, 7 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          1 day, 7 hours ago
          
            vgmstream txtp txtp_parser.c add_entry resource consumption
          
      VDB-399669 | vgmstream txtp txtp_parser.c add_entry resource consumption
    
    technical-descriptionvdb-entry
  
      VDB-399669 | CTI Indicators (IOB, IOC, TTP, IOA)
    
    permissions-requiredsignature
  
      CVE-2026-86515 | CVE Analysis and Report
    
    third-party-advisory
  
      Submit #908370 | vgmstream r2117 Resource Consumption
    
    third-party-advisory
  
      https://github.com/vgmstream/vgmstream/issues/1973
    
    issue-trackingexploit
  
      https://github.com/vgmstream/vgmstream/pull/1965
    
    issue-trackingpatch
  
      https://github.com/vgmstream/vgmstream/commit/4b6a02dd1aff6428255db912563d77d4c…
    
    patch
  
          Ignored references (1)
        
      https://github.com/vgmstream/vgmstream/
    
    product
  
    vgmstream

            ==r2117

NIXPKGS-2026-2542

GitHub issue published 1 day, 7 hours ago

vgmstream txth-txtp txth.c sscanf stack-based overflow

          Permalink
          
            CVE-2026-86514
          
        2.1 LOW
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Passive (P)
        
          Vulnerable System Impact Confidentiality (VC): Low (L)
        
          Vulnerable System Impact Integrity (VI): Low (L)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Exploit Maturity (E): POC (P)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Passive (P)
        
          Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
        
          Modified Vulnerable System Impact Integrity (MVI): Low (L)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
              updated
            
          1 day, 7 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 day, 16 hours ago
          
          @LeSuisse
          
              ignored
            
              package deadbeefPlugins.vgmstream
            
          1 day, 7 hours ago
          
          @LeSuisse
          
              accepted
            
          1 day, 7 hours ago
          
          @LeSuisse
          
              published on GitHub
            
          1 day, 7 hours ago
          
            vgmstream txth-txtp txth.c sscanf stack-based overflow
          
      VDB-399668 | vgmstream txth-txtp txth.c sscanf stack-based overflow
    
    technical-descriptionvdb-entry
  
      VDB-399668 | CTI Indicators (IOB, IOC, IOA)
    
    permissions-requiredsignature
  
      CVE-2026-86514 | CVE Analysis and Report
    
    third-party-advisory
  
      Submit #908369 | vgmstream r2117 Stack-based Buffer Overflow
    
    third-party-advisory
  
      https://github.com/vgmstream/vgmstream/issues/1972
    
    issue-trackingexploit
  
      https://github.com/vgmstream/vgmstream/pull/1956
    
    issue-trackingpatch
  
      https://github.com/vgmstream/vgmstream/commit/4669d37a6af94866f6f0628678f9f90d4…
    
    patch
  
      https://github.com/vgmstream/vgmstream/
    
    product
  
    vgmstream

            ==r2117

Nixpkgs security tracker

Published issues

An issue was discovered in the mirage-crypto-pk package before 2.3.0 …

Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound

In the opam package before 2.5.2 for OCaml, the sandbox …

KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size

GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

GitPython before 3.1.59 Path Traversal via separate-git-dir

GitPython before 3.1.59 Arbitrary File Read via TagReference.create

GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 Remote Code Execution via Config Injection

GitPython before 3.1.59 Arbitrary File Read via Repo.blame()

GitPython before 3.1.60 Denial of Service via ReDoS

GitPython 3.1.59 Local File Content Oracle via --no-index

OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

vgmstream txtp txtp_parser.c add_entry resource consumption

vgmstream txth-txtp txth.c sscanf stack-based overflow