NIXPKGS-2026-1820

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-49298

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments

• https://github.com/apache/airflow/pull/60108 patch
• https://lists.apache.org/thread/wo09vrks8189dzsot39rvrx3vnx102tt vendor-advisory

---

apache-airflow

• <3.2.2

NIXPKGS-2026-1819

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-43958

7.8 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  3 packages

  • python312Packages.rrdtool
  • python314Packages.rrdtool
  • python313Packages.rrdtool
  1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

• https://access.redhat.com/security/cve/CVE-2026-43958 x_refsource_REDHATvdb-entry
• RHBZ#2460932 issue-trackingx_refsource_REDHAT

---

rrdtool

NIXPKGS-2026-1818

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-10230

1.9 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  4 references

  • CVE-2026-10230 | CVE Analysis and Report
  • VDB-367509 | CTI Indicators (IOB, IOC, …
  • Submit #821190 | Assimp commit 17c12da …
  • https://github.com/assimp/assimp/
  1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow

• VDB-367509 | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow technical-descriptionvdb-entry
• https://github.com/assimp/assimp/issues/6615 issue-trackingexploit

Ignored references (4)

• VDB-367509 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-10230 | CVE Analysis and Report third-party-advisory
• Submit #821190 | Assimp commit 17c12da Heap-based Buffer Overflow third-party-advisory
• https://github.com/assimp/assimp/ product

---

Assimp

• ==6.0.4
• ==6.0.3
• ==6.0.1
• ==6.0.2
• ==6.0.0

NIXPKGS-2026-1817

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-10275

1.3 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  5 references

  • https://github.com/OpenSC/OpenSC/
  • CVE-2026-10275 | CVE Analysis and Report
  • VDB-367568 | CTI Indicators (IOB, IOC, …
  • Submit #825403 | OpenSC OpenSC 0.26.1 a…
  • https://pan.baidu.com/s/1nrZPKDz2eAcCps…
  1 week, 5 days ago
• @LeSuisse ignored
  11 packages

  • openscad
  • openscap
  • openscreen
  • openscad-lsp
  • openscenegraph
  • openscad-unstable
  • kakounePlugins.openscad-kak
  • vscode-extensions.antyos.openscad
  • tree-sitter-grammars.tree-sitter-openscad
  • python313Packages.tree-sitter-grammars.tree-sitter-openscad
  • python314Packages.tree-sitter-grammars.tree-sitter-openscad
  1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow

• VDB-367568 | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow technical-descriptionvdb-entry
• https://github.com/OpenSC/OpenSC/issues/3682 issue-tracking
• https://github.com/OpenSC/OpenSC/pull/3684 issue-trackingpatch
• https://github.com/OpenSC/OpenSC/commit/814f745b3b6d100295f65f1935edd33d520d33ab patch

Ignored references (5)

• VDB-367568 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-10275 | CVE Analysis and Report third-party-advisory
• Submit #825403 | OpenSC OpenSC 0.26.1 and earlier Buffer Overflow third-party-advisory
• https://pan.baidu.com/s/1nrZPKDz2eAcCpsaFiIRlrg exploit
• https://github.com/OpenSC/OpenSC/ product

---

OpenSC

• ==0.26.0
• ==0.26.1

NIXPKGS-2026-1816

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-10294

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 5 days ago
• @LeSuisse ignored
  4 references

  • https://github.com/PackageKit/PackageKi…
  • Submit #826470 | PackageKit v1.3.5 Inco…
  • CVE-2026-10294 | CVE Analysis and Report
  • VDB-367587 | CTI Indicators (IOB, IOC, …
  1 week, 5 days ago
• @LeSuisse ignored
  3 packages

  • qt6Packages.packagekit-qt
  • kdePackages.packagekit-qt
  • gnome-packagekit
  1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

PackageKit API pk-transaction.c g_file_test improper authorization

• VDB-367587 | PackageKit API pk-transaction.c g_file_test improper authorization technical-descriptionvdb-entry
• https://github.com/PackageKit/PackageKit/issues/969 issue-trackingexploit

Ignored references (4)

• VDB-367587 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• CVE-2026-10294 | CVE Analysis and Report third-party-advisory
• Submit #826470 | PackageKit v1.3.5 Incorrect Use of Privileged APIs third-party-advisory
• https://github.com/PackageKit/PackageKit/ product

---

PackageKit

• ==1.3.5
• ==1.3.3
• ==1.3.4
• ==1.3.2
• ==1.3.0
• ==1.3.1

No available patch / fix (2026-05-02)

NIXPKGS-2026-1815

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-8796

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 6 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input

• https://github.com/Sereal/Sereal/commit/303a2c69cdba80bf37a3ff43461e0aa78198a7a… patch
• https://metacpan.org/release/YVES/Sereal-Decoder-5.005/changes release-notes

---

Sereal-Decoder

• <5.005

NIXPKGS-2026-1814

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-10194

5.3 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Not Defined (X)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 6 days ago
• @LeSuisse ignored
  2 references

  • CVE-2026-10194 | CVE Analysis and Report
  • VDB-367475 | CTI Indicators (IOB, IOC, …
  1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow

• VDB-367475 | OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow technical-descriptionvdb-entry
• Submit #821029 | DCMTK v3.7.0+ DEV Heap-based Buffer Overflow third-party-advisory
• https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=0f78a4ef6f645ea5530166e445e5436a5… patchbroken-link

Ignored references (2)

• VDB-367475 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-10194 | CVE Analysis and Report third-party-advisory

---

DCMTK

• ==3.7.0

NIXPKGS-2026-1813

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-10197

1.9 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 6 days ago
• @LeSuisse ignored
  4 references

  • https://github.com/assimp/assimp/
  • CVE-2026-10197 | CVE Analysis and Report
  • VDB-367477 | CTI Indicators (IOB, IOC, …
  • Submit #821177 | Assimp commit 17c12da …
  1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference

• VDB-367477 | Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference technical-descriptionvdb-entry
• https://github.com/assimp/assimp/issues/6608 issue-tracking
• https://github.com/user-attachments/files/27193894/poc.zip exploit
• https://github.com/assimp/assimp/pull/6645 issue-trackingpatch

Ignored references (4)

• VDB-367477 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-10197 | CVE Analysis and Report third-party-advisory
• Submit #821177 | Assimp commit 17c12da NULL Pointer Dereference third-party-advisory
• https://github.com/assimp/assimp/ product

---

Assimp

• ==6.0.4
• ==6.0.3
• ==6.0.1
• ==6.0.2
• ==6.0.0

NIXPKGS-2026-1812

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-10198

1.9 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 6 days ago
• @LeSuisse ignored
  4 references

  • https://github.com/assimp/assimp/
  • CVE-2026-10198 | CVE Analysis and Report
  • VDB-367478 | CTI Indicators (IOB, IOC, …
  • Submit #821178 | Assimp commit 17c12da …
  1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference

• VDB-367478 | Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference technical-descriptionvdb-entry
• https://github.com/assimp/assimp/issues/6609 issue-tracking
• https://github.com/user-attachments/files/27193865/poc.zip exploit

Ignored references (4)

• VDB-367478 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-10198 | CVE Analysis and Report third-party-advisory
• Submit #821178 | Assimp commit 17c12da NULL Pointer Dereference third-party-advisory
• https://github.com/assimp/assimp/ product

---

Assimp

• ==6.0.4
• ==6.0.3
• ==6.0.1
• ==6.0.2
• ==6.0.0

NIXPKGS-2026-1811

GitHub issue published 1 week, 5 days ago

Permalink CVE-2026-10174

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 5 days ago by @LeSuisse Activity log

• Created suggestion 1 week, 6 days ago
• @LeSuisse ignored package raider 1 week, 5 days ago
• @LeSuisse ignored
  3 references

  • VDB-367455 | CTI Indicators (IOB, IOC, …
  • CVE-2026-10174 | CVE Analysis and Report
  • https://github.com/Aider-AI/aider/
  1 week, 5 days ago
• @LeSuisse ignored package pkgsRocm.vimPlugins.aider-nvim 1 week, 5 days ago
• @LeSuisse accepted 1 week, 5 days ago
• @LeSuisse published on GitHub 1 week, 5 days ago

Aider-AI Aider Pre-commit Hook args.py protection mechanism

• VDB-367455 | Aider-AI Aider Pre-commit Hook args.py protection mechanism technical-descriptionvdb-entry
• Submit #819901 | disler aider 0.86.3 Security Bypass third-party-advisory
• https://github.com/Aider-AI/aider/issues/5057 issue-trackingexploit

Ignored references (3)

• VDB-367455 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• CVE-2026-10174 | CVE Analysis and Report third-party-advisory
• https://github.com/Aider-AI/aider/ product

---

Aider

• ==0.86.3