NIXPKGS-2026-0832

GitHub issue published 2 months, 4 weeks ago

Permalink CVE-2026-29180

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 4 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
2 months, 4 weeks ago
@LeSuisse accepted 2 months, 4 weeks ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

Fleet's team maintainer can transfer hosts from any team via missing source team authorization

https://github.com/fleetdm/fleet/security/advisories/GHSA-m2h6-4xpq-qw3m x_refsource_CONFIRM

fleet

==< 4.81.1

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-m2h6-4xpq-qw3m

NIXPKGS-2026-0835

GitHub issue published 2 months, 4 weeks ago

Permalink CVE-2026-34387

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 4 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
2 months, 4 weeks ago
@LeSuisse accepted 2 months, 4 weeks ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts

https://github.com/fleetdm/fleet/security/advisories/GHSA-7rhw-5mpv-gp4h x_refsource_CONFIRM

fleet

==< 4.81.1

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-7rhw-5mpv-gp4h

NIXPKGS-2026-0834

GitHub issue published 2 months, 4 weeks ago

Permalink CVE-2026-34388

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 4 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
2 months, 4 weeks ago
@LeSuisse accepted 2 months, 4 weeks ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint

https://github.com/fleetdm/fleet/security/advisories/GHSA-w254-4hp5-7cvv x_refsource_CONFIRM

fleet

==< 4.81.0

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-w254-4hp5-7cvv

NIXPKGS-2026-0830

GitHub issue published 2 months, 4 weeks ago

Permalink CVE-2026-34386

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 4 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
2 months, 4 weeks ago
@LeSuisse accepted 2 months, 4 weeks ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin

https://github.com/fleetdm/fleet/security/advisories/GHSA-9p23-p2m4-2r4m x_refsource_CONFIRM

fleet

==< 4.81.0

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-9p23-p2m4-2r4m

NIXPKGS-2026-0828

GitHub issue published 2 months, 4 weeks ago

          Permalink
          
            CVE-2026-4988
          
        3.7 LOW
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): High (H)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): Low (L)
        
          Exploit Code Maturity (E): Proof-of-Concept (P)
        
          Remediation Level (RL): Not Defined (X)
        
          Report Confidence (RC): Reasonable (R)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): High (H)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): Low (L)
        
              updated
            
          2 months, 4 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              ignored
            
              package open5gs-webui
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 4 weeks ago
          
            Open5GS CCA Message smf_s6b denial of service
          
      VDB-353875 | Open5GS CCA Message smf_s6b denial of service
    
    technical-descriptionvdb-entry
  
      VDB-353875 | CTI Indicators (IOB, IOC, TTP, IOA)
    
    permissions-requiredsignature
  
      Submit #771349 | Open5GS SMF v2.7.6 Denial of Service
    
    third-party-advisory
  
      https://github.com/open5gs/open5gs/issues/4342
    
    issue-tracking
  
      https://github.com/open5gs/open5gs/issues/4342#issue-4021772232
    
    issue-trackingexploit
  
      https://github.com/open5gs/open5gs/
    
    product
  
    Open5GS

            ==2.7.6
          
          Upstream issue: https://github.com/open5gs/open5gs/issues/4342

NIXPKGS-2026-0826

GitHub issue published 2 months, 4 weeks ago

          Permalink
          
            CVE-2026-33433
          
              updated
            
          2 months, 4 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              ignored
            
              package traefik-certs-dumper
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 4 weeks ago
          
            Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField
          
      https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c
    
    x_refsource_CONFIRM
  
      https://github.com/traefik/traefik/releases/tag/v2.11.42
    
    x_refsource_MISC
  
      https://github.com/traefik/traefik/releases/tag/v3.6.11
    
    x_refsource_MISC
  
      https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3
    
    x_refsource_MISC
  
    traefik

            ==>= 3.7.0-ea.1, < 3.7.0-ea.3
          
            ==>= 3.0.0-beta1, < 3.6.11
          
            ==< 2.11.42
          
          Advisory: https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c

NIXPKGS-2026-0824

GitHub issue published 2 months, 4 weeks ago

Permalink CVE-2026-33205

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 4 weeks ago
@LeSuisse ignored
3 packages
- calibre-web
- pkgsRocm.calibre-no-speech
- calibre-no-speech
2 months, 4 weeks ago
@LeSuisse accepted 2 months, 4 weeks ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

calibre has Server-Side Request Forgery in ebook viewer backend

https://github.com/kovidgoyal/calibre/security/advisories/GHSA-4926-v9px-wv7v x_refsource_CONFIRM

calibre

==< 9.6.0

Advisory: https://github.com/kovidgoyal/calibre/security/advisories/GHSA-4926-v9px-wv7v

NIXPKGS-2026-0822

GitHub issue published 2 months, 4 weeks ago

          Permalink
          
            CVE-2026-4985
          
        4.3 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): Low (L)
        
          Exploit Code Maturity (E): Not Defined (X)
        
          Remediation Level (RL): Official Fix (O)
        
          Report Confidence (RC): Confirmed (C)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): Low (L)
        
              updated
            
          2 months, 4 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 4 weeks ago
          
            dloebl CGIF GIF Image cgif.c cgif_addframe integer overflow
          
      VDB-353874 | dloebl CGIF GIF Image cgif.c cgif_addframe integer overflow
    
    technical-descriptionvdb-entry
  
      VDB-353874 | CTI Indicators (IOB, IOC, IOA)
    
    permissions-requiredsignature
  
      Submit #778278 | dloebl CGIF   v0.4.0 to v0.5.2  Integer Overflow
    
    third-party-advisory
  
      https://github.com/dloebl/cgif/issues/110
    
    issue-tracking
  
      https://github.com/dloebl/cgif/pull/112
    
    issue-trackingpatch
  
      https://github.com/dloebl/cgif/commit/b0ba830093f4317a5d1f345715d2fa3cd2dab474
    
    patch
  
      https://github.com/dloebl/cgif/
    
    product
  
    CGIF

            ==0.5.1
          
            ==0.5.2
          
            ==0.5.0
          
          Patch: https://github.com/dloebl/cgif/commit/b0ba830093f4317a5d1f345715d2fa3cd2dab474

NIXPKGS-2026-0820

GitHub issue published 2 months, 4 weeks ago

Permalink CVE-2026-33744

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 4 weeks ago
@LeSuisse accepted 2 months, 4 weeks ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml

https://github.com/bentoml/BentoML/security/advisories/GHSA-jfjg-vc52-wqvf x_refsource_CONFIRM

BentoML

==< 1.4.37

Advisory: https://github.com/bentoml/BentoML/security/advisories/GHSA-jfjg-vc52-wqvf

NIXPKGS-2026-0818

GitHub issue published 2 months, 4 weeks ago

          Permalink
          
            CVE-2026-33699
          
              updated
            
          2 months, 4 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              ignored
            
                4 packages
                capypdf
python312Packages.pypdfium2
python313Packages.pypdfium2
python314Packages.pypdfium2

          2 months, 4 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 4 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 4 weeks ago
          
            pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
          
      https://github.com/py-pdf/pypdf/security/advisories/GHSA-87mj-5ggw-8qc3
    
    x_refsource_CONFIRM
  
      https://github.com/py-pdf/pypdf/pull/3693
    
    x_refsource_MISC
  
      https://github.com/py-pdf/pypdf/releases/tag/6.9.2
    
    x_refsource_MISC
  
    pypdf

            ==< 6.9.2
          
          Advisory: https://github.com/py-pdf/pypdf/security/advisories/GHSA-87mj-5ggw-8qc3

Nixpkgs security tracker

Published issues

Fleet's team maintainer can transfer hosts from any team via missing source team authorization

Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts

Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint

Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin

Open5GS CCA Message smf_s6b denial of service

Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField

calibre has Server-Side Request Forgery in ebook viewer backend

dloebl CGIF GIF Image cgif.c cgif_addframe integer overflow

BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml

pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream