NIXPKGS-2026-2791

GitHub issue published 3 hours ago

Fleet Homebrew Cask OS Command Injection via Metadata

Permalink CVE-2026-101045

8.9 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Attack Requirement (AT): Present (P)
• Privileges Required (PR): High (H)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Attack Requirement (MAT): Present (P)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): High (H)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 3 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  17 packages

  • fleetctl
  • fleet-orbit
  • fleet-desktop
  • fleeting-plugin-aws
  • azure-cli-extensions.fleet
  • python313Packages.tesla-fleet-api
  • python314Packages.tesla-fleet-api
  • haskellPackages.amazonka-iotfleethub
  • haskellPackages.amazonka-iotfleetwise
  • python313Packages.mypy-boto3-iotfleethub
  • python314Packages.mypy-boto3-iotfleethub
  • python313Packages.mypy-boto3-iotfleetwise
  • python314Packages.mypy-boto3-iotfleetwise
  • python313Packages.types-aiobotocore-iotfleethub
  • python314Packages.types-aiobotocore-iotfleethub
  • python313Packages.types-aiobotocore-iotfleetwise
  • python314Packages.types-aiobotocore-iotfleetwise
  4 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 3 hours ago

Fleet Homebrew Cask OS Command Injection via Metadata

• GitHub Security Advisory (GHSA-fv3p-h7wv-2jgm) vendor-advisory
• VulnCheck Advisory: Fleet Homebrew Cask OS Command Injection via Metadata third-party-advisory

---

fleet

NIXPKGS-2026-2790

GitHub issue published 3 hours ago

spaceship-prompt through 4.22.5 Terminal Escape Sequence Injection

Permalink CVE-2026-100867

4.8 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 3 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 3 hours ago

spaceship-prompt through 4.22.5 Terminal Escape Sequence Injection

• GitHub Issue #1567 issue-tracking
• https://github.com/spaceship-prompt/spaceship-prompt/blob/fd0d6653a134fe28f498e… technical-description
• https://github.com/spaceship-prompt/spaceship-prompt/blob/fd0d6653a134fe28f498e… technical-description
• https://github.com/spaceship-prompt/spaceship-prompt product
• VulnCheck Advisory: spaceship-prompt through 4.22.5 Terminal Escape Sequence Injection third-party-advisory

---

spaceship-prompt

• =<4.22.5

NIXPKGS-2026-2789

GitHub issue published 3 hours ago

Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one

Permalink CVE-2026-100889

5.5 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 3 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 3 hours ago

Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one

• VDB-410839 | Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one technical-descriptionvdb-entry
• VDB-410839 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• CVE-2026-100889 | CVE Analysis and Report third-party-advisory
• Submit #917063 | The Trusted Domain Project OpenDKIM 2.11.0 Out-of-Bounds Read third-party-advisory
• https://weitongli.com/share/opendkim-qp-off-by-one.html exploit

---

OpenDKIM

• ==2.0
• ==2.9
• ==2.2
• ==2.8
• ==2.4
• ==2.10
• ==2.6
• ==2.5
• ==2.7
• ==2.11.0
• ==2.3
• ==2.1

NIXPKGS-2026-2788

GitHub issue published 3 hours ago

Trusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write

Permalink CVE-2026-100888

5.5 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 3 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 3 hours ago
• @LeSuisse published on GitHub 3 hours ago

Trusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write

• VDB-410837 | Trusted Domain Project OpenDKIM DKIM Signature Header Selection dkim-canon.c dkim_canon_selecthdrs out-of-bounds write technical-descriptionvdb-entry
• VDB-410837 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• CVE-2026-100888 | CVE Analysis and Report third-party-advisory
• Submit #917015 | The Trusted Domain Project OpenDKIM 2.11.0 Out-of-bounds Write third-party-advisory
• https://weitongli.com/share/opendkim-h-tag-oob-write.html exploit

---

OpenDKIM

• ==2.0
• ==2.9
• ==2.2
• ==2.8
• ==2.4
• ==2.10
• ==2.6
• ==2.5
• ==2.7
• ==2.11.0
• ==2.3
• ==2.1

NIXPKGS-2026-2787

GitHub issue published 4 hours ago

python3Packages.monai: security issues =< 1.6.0

Permalink CVE-2026-100842

7.3 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Attack Requirement (AT): Present (P)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Attack Requirement (MAT): Present (P)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 4 hours ago

MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains

• GitHub Security Advisory (GHSA-h89g-r5pc-wxfm) vendor-advisory
• VulnCheck Advisory: MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains third-party-advisory

---

MONAI

• =<1.6.0

Permalink CVE-2026-100840

8.5 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 4 hours ago

MONAI through 1.6.0 Remote Code Execution via bundle configuration

• GitHub Security Advisory (GHSA-873f-pvrv-4x83) vendor-advisory
• VulnCheck Advisory: MONAI through 1.6.0 Remote Code Execution via bundle configuration third-party-advisory

---

MONAI

• =<1.6.0

Permalink CVE-2026-100841

8.5 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 4 hours ago

MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache

• GitHub Security Advisory (GHSA-636w-j999-g7x5) vendor-advisory
• VulnCheck Advisory: MONAI 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache third-party-advisory

---

MONAI

• =<1.6.0

NIXPKGS-2026-2786

GitHub issue published 4 hours ago

python3Packages.monai: security issues < 1.6.0

Permalink CVE-2026-100843

8.5 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 4 hours ago

MONAI before 1.6.0 Remote Code Execution via algo_from_pickle

• GitHub Security Advisory (GHSA-qxq5-qhx6-94qw) vendor-advisory
• VulnCheck Advisory: MONAI before 1.6.0 Remote Code Execution via algo_from_pickle third-party-advisory

---

MONAI

• <1.6.0
• ==1.6.0

Permalink CVE-2026-100844

8.6 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 4 hours ago

MONAI before 1.6.0 OS Command Injection via dataset_name_or_id

• GitHub Security Advisory (GHSA-rghg-q7wp-9767) vendor-advisory
• VulnCheck Advisory: MONAI before 1.6.0 OS Command Injection via dataset_name_or_id third-party-advisory

---

MONAI

• ==1.6.0
• <1.6.0

Permalink CVE-2026-100845

8.5 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 4 hours ago

MONAI before 1.6.0 Remote Code Execution via NumpyReader

• GitHub Security Advisory (GHSA-wg9g-w2j2-8pgr) vendor-advisory
• VulnCheck Advisory: MONAI before 1.6.0 Remote Code Execution via NumpyReader third-party-advisory

---

MONAI

• <1.6.0
• ==1.6.0

NIXPKGS-2026-2785

GitHub issue published 4 hours ago

flatpak: security issues < 1.18.1

Permalink CVE-2026-96280

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  5 packages

  • flatpak-builder
  • flatpak-xdg-utils
  • flatpak-builder-tools
  • kdePackages.flatpak-kcm
  • haskellPackages.cabal-flatpak
  4 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse ignored maintainer @getchoo 4 hours ago maintainer.ignore
• @LeSuisse restored maintainer @getchoo 4 hours ago maintainer.restore
• @LeSuisse published on GitHub 4 hours ago

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

• https://access.redhat.com/security/cve/CVE-2026-96280 x_refsource_REDHATvdb-entry
• RHBZ#2539419 issue-trackingx_refsource_REDHAT
• https://github.com/flatpak/flatpak/security/advisories/GHSA-jr92-2v97-wgvc

---

flatpak

Permalink CVE-2026-96281

6.2 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Physical (P)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Physical (P)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  5 packages

  • flatpak-builder
  • flatpak-xdg-utils
  • flatpak-builder-tools
  • kdePackages.flatpak-kcm
  • haskellPackages.cabal-flatpak
  4 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse ignored maintainer @getchoo 4 hours ago maintainer.ignore
• @LeSuisse published on GitHub 4 hours ago

Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes

• https://access.redhat.com/security/cve/CVE-2026-96281 vdb-entryx_refsource_REDHAT
• RHBZ#2539421 issue-trackingx_refsource_REDHAT
• https://github.com/flatpak/flatpak/security/advisories/GHSA-q4gr-vc25-57m5

---

flatpak

Permalink CVE-2026-96282

3.1 LOW

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): Low (L)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): None (N)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  5 packages

  • flatpak-builder
  • flatpak-xdg-utils
  • flatpak-builder-tools
  • kdePackages.flatpak-kcm
  • haskellPackages.cabal-flatpak
  4 hours ago
• @LeSuisse ignored maintainer @getchoo 4 hours ago maintainer.ignore
• @LeSuisse accepted 4 hours ago
• @LeSuisse published on GitHub 4 hours ago

Flatpak: flatpak: extension metadata path traversal file existence oracle

• https://access.redhat.com/security/cve/CVE-2026-96282 x_refsource_REDHATvdb-entry
• RHBZ#2539422 issue-trackingx_refsource_REDHAT
• https://github.com/flatpak/flatpak/security/advisories/GHSA-w69g-9x8j-7p8f

---

flatpak

NIXPKGS-2026-2784

GitHub issue published 4 hours ago

Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks

Permalink CVE-2026-96279

6.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  5 packages

  • flatpak-builder
  • flatpak-xdg-utils
  • flatpak-builder-tools
  • kdePackages.flatpak-kcm
  • haskellPackages.cabal-flatpak
  4 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse ignored maintainer @getchoo 4 hours ago maintainer.ignore
• @LeSuisse published on GitHub 4 hours ago

Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks

• https://access.redhat.com/security/cve/CVE-2026-96279 vdb-entryx_refsource_REDHAT
• RHBZ#2539417 issue-trackingx_refsource_REDHAT
• https://github.com/flatpak/flatpak/security/advisories/GHSA-9rww-v4mm-x4jg

---

flatpak

NIXPKGS-2026-2783

GitHub issue published 4 hours ago

Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull

Permalink CVE-2026-96283

3.3 LOW

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  5 packages

  • flatpak-builder
  • flatpak-xdg-utils
  • flatpak-builder-tools
  • kdePackages.flatpak-kcm
  • haskellPackages.cabal-flatpak
  4 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse ignored maintainer @getchoo 4 hours ago maintainer.ignore
• @LeSuisse published on GitHub 4 hours ago

Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull

• https://access.redhat.com/security/cve/CVE-2026-96283 x_refsource_REDHATvdb-entry
• RHBZ#2539424 issue-trackingx_refsource_REDHAT
• https://github.com/flatpak/flatpak/security/advisories/GHSA-89xm-3m96-w3jg

---

flatpak

NIXPKGS-2026-2782

GitHub issue published 4 hours ago

Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following

Permalink CVE-2026-96284

2.5 LOW

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 10 hours ago
• @LeSuisse ignored
  5 packages

  • flatpak-builder
  • flatpak-xdg-utils
  • flatpak-builder-tools
  • kdePackages.flatpak-kcm
  • haskellPackages.cabal-flatpak
  4 hours ago
• @LeSuisse accepted 4 hours ago
• @LeSuisse ignored maintainer @getchoo 4 hours ago maintainer.ignore
• @LeSuisse published on GitHub 4 hours ago

Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following

• https://access.redhat.com/security/cve/CVE-2026-96284 vdb-entryx_refsource_REDHAT
• RHBZ#2539423 issue-trackingx_refsource_REDHAT
• https://github.com/flatpak/flatpak/security/advisories/GHSA-2fxp-43j9-pwvc

---

flatpak