NIXPKGS-2026-1284

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-41649

7.7 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Changed (C)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 2 weeks ago
• @LeSuisse ignored reference https://g… 4 months, 2 weeks ago
• @LeSuisse ignored
  17 packages

  • go-outline
  • mdbook-pdf-outline
  • typstPackages.suboutline
  • python312Packages.outlines
  • python313Packages.outlines
  • typstPackages.suboutline_0_1_0
  • typstPackages.suboutline_0_2_0
  • typstPackages.suboutline_0_3_0
  • mplus-outline-fonts.osdnRelease
  • python312Packages.outlines-core
  • python313Packages.outlines-core
  • python314Packages.outlines-core
  • typstPackages.outline-summaryst
  • mplus-outline-fonts.githubRelease
  • pkgsRocm.python3Packages.outlines
  • typstPackages.outline-summaryst_0_1_0
  • pkgsRocm.python3Packages.outlines-core
  4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse ignored
  4 maintainers

  • @cab404
  • @e1mo
  • @xanderio
  • @yrd
  4 months, 2 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 4 months, 2 weeks ago

Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

• https://github.com/outline/outline/security/advisories/GHSA-23jj-rp48-w7q7 x_refsource_CONFIRM
• https://github.com/outline/outline/commit/1b91a295e10f58a1088c54f533773788325ff460 x_refsource_MISC

Ignored references (1)

• https://github.com/outline/outline/releases/tag/v1.7.0 x_refsource_MISC

---

outline

• ==>= 0.86.0, < 1.7.0

NIXPKGS-2026-1283

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-40560

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 2 weeks ago
• @LeSuisse ignored
  4 packages

  • perlPackages.CatalystXScriptServerStarman
  • perl5Packages.CatalystXScriptServerStarman
  • perl538Packages.CatalystXScriptServerStarman
  • perl540Packages.CatalystXScriptServerStarman
  4 months, 2 weeks ago
• @LeSuisse ignored reference https://d… 4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence

• https://github.com/miyagawa/Starman/commit/ced205f0805027e9d9c0731f8c40b1042206… patch
• https://metacpan.org/release/MIYAGAWA/Starman-0.4018/changes release-notes

Ignored references (1)

• https://datatracker.ietf.org/doc/html/rfc7230#section-3.3.3

---

Starman

• <0.4018

NIXPKGS-2026-1282

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-7183

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Proof-of-Concept (P)
• Remediation Level (RL): Official Fix (O)
• Report Confidence (RC): Confirmed (C)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception

• VDB-359784 | aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception technical-descriptionvdb-entry
• https://github.com/aligungr/UERANSIM/commit/ca1a66fffe282767bb08618af9f848e3b68… patch

Ignored references (4)

• VDB-359784 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• Submit #800026 | UERANSIM 3.2.7 DoS via Malformed RLS Packet (CWE-248) third-party-advisory
• https://github.com/aligungr/UERANSIM/releases/tag/v3.2.8 patch
• https://github.com/aligungr/UERANSIM/ product

---

UERANSIM

• ==3.2.4
• ==3.2.5
• ==3.2.3
• ==3.2.8
• ==3.2.6
• ==3.2.7
• ==3.2.0
• ==3.2.2
• ==3.2.1

NIXPKGS-2026-1281

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-7135

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Proof-of-Concept (P)
• Remediation Level (RL): Official Fix (O)
• Report Confidence (RC): Confirmed (C)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 2 weeks ago
• @LeSuisse ignored
  40 packages

  • msgpack-c
  • msgpack-cxx
  • gpac-unstable
  • msgpack-tools
  • rubyPackages.msgpack
  • phpExtensions.msgpack
  • haskellPackages.msgpack
  • perlPackages.MsgPackRaw
  • php82Extensions.msgpack
  • php83Extensions.msgpack
  • php84Extensions.msgpack
  • php85Extensions.msgpack
  • luaPackages.lua-cmsgpack
  • perl5Packages.MsgPackRaw
  • rubyPackages_3_3.msgpack
  • rubyPackages_3_4.msgpack
  • rubyPackages_4_0.msgpack
  • python312Packages.msgpack
  • python313Packages.msgpack
  • python314Packages.msgpack
  • lua51Packages.lua-cmsgpack
  • lua52Packages.lua-cmsgpack
  • lua53Packages.lua-cmsgpack
  • lua54Packages.lua-cmsgpack
  • lua55Packages.lua-cmsgpack
  • perl538Packages.MsgPackRaw
  • perl540Packages.MsgPackRaw
  • luajitPackages.lua-cmsgpack
  • python312Packages.ormsgpack
  • python313Packages.ormsgpack
  • python314Packages.ormsgpack
  • haskellPackages.data-msgpack
  • python312Packages.msgpack-numpy
  • python313Packages.msgpack-numpy
  • python314Packages.msgpack-numpy
  • haskellPackages.data-msgpack-types
  • python312Packages.u-msgpack-python
  • python313Packages.u-msgpack-python
  • python314Packages.u-msgpack-python
  • chickenPackages_5.chickenEggs.msgpack
  4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

GPAC MP4Box box_code_base.c elng_box_read out-of-bounds

• VDB-359734 | GPAC MP4Box box_code_base.c elng_box_read out-of-bounds technical-descriptionvdb-entry
• https://github.com/gpac/gpac/issues/3516 issue-trackingexploit
• https://github.com/gpac/gpac/commit/cf6ac48c972eaaee2af270adc3f36615325deb3e patch

Ignored references (4)

• VDB-359734 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• Submit #800985 | gpac laster Memory Corruption third-party-advisory
• https://github.com/gpac/gpac/releases/tag/abi-16.8 patch
• https://github.com/gpac/gpac/ product

---

GPAC

• ==26.03-DEV-rev105-g8f39a1eb3-master

NIXPKGS-2026-1280

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-42371

5.1 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 2 weeks ago
• @LeSuisse ignored maintainer @bosu 4 months, 2 weeks ago maintainer.ignore
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

uriparser before 1.0.1 has numeric truncation in text range comparison, …

• https://github.com/uriparser/uriparser/pull/298
• http://www.openwall.com/lists/oss-security/2026/04/27/2

Ignored references (1)

• https://uriparser.github.io

---

uriparser

• <1.0.1

NIXPKGS-2026-1279

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-6994

6.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Not Defined (X)
• Remediation Level (RL): Official Fix (O)
• Report Confidence (RC): Confirmed (C)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 3 weeks ago
• @LeSuisse ignored
  11 packages

  • opa-envoy-plugin
  • python312Packages.envoy-utils
  • python313Packages.envoy-utils
  • python314Packages.envoy-utils
  • python312Packages.envoy-reader
  • python313Packages.envoy-reader
  • python314Packages.envoy-reader
  • python313Packages.envoy-data-plane
  • python314Packages.envoy-data-plane
  • home-assistant-component-tests.enphase_envoy
  • tests.home-assistant-components.enphase_envoy
  4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

Envoy Query Parameter header_mutation.cc params.add injection

• https://github.com/envoyproxy/envoy/pull/43502/ patchissue-tracking

Ignored references (4)

• VDB-359546 | Envoy Query Parameter header_mutation.cc params.add injection technical-descriptionvdb-entry
• VDB-359546 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #797241 | Envoy >= 1.33.0 Injection (CWE-74) third-party-advisory
• https://github.com/envoyproxy/envoy/commit/f8f4f1e02fdc64ecd4acf2d903208dd7285a… patch

---

Envoy

• ==1.14
• ==1.11
• ==1.17
• ==1.32
• ==1.29
• ==1.5
• ==1.26
• ==1.6
• ==1.12
• ==1.31
• ==1.27
• ==1.18
• ==1.16
• ==1.30
• ==1.2
• ==1.28
• ==1.1
• ==1.13
• ==1.24
• ==1.4
• ==1.22
• ==1.19
• ==1.10
• ==1.15
• ==1.3
• ==1.33.0
• ==1.23
• ==1.20
• ==1.21
• ==1.25
• ==1.0
• ==1.8
• ==1.7
• ==1.9

Patch: https://github.com/envoyproxy/envoy/commit/be601deb69247f1c192c4d3548102bddac756729

NIXPKGS-2026-1278

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-7020

5.6 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Proof-of-Concept (P)
• Remediation Level (RL): Not Defined (X)
• Report Confidence (RC): Reasonable (R)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 2 weeks ago
• @LeSuisse ignored
  22 packages

  • gollama
  • ollama-cpu
  • nextjs-ollama-llm-ui
  • python312Packages.ollama
  • python313Packages.ollama
  • python314Packages.ollama
  • python312Packages.llm-ollama
  • python313Packages.llm-ollama
  • python314Packages.llm-ollama
  • haskellPackages.ollama-haskell
  • gnomeExtensions.ollama-indicator
  • python312Packages.langchain-ollama
  • python313Packages.langchain-ollama
  • python314Packages.langchain-ollama
  • home-assistant-component-tests.ollama
  • tests.home-assistant-components.ollama
  • python312Packages.llama-index-llms-ollama
  • python313Packages.llama-index-llms-ollama
  • python312Packages.llama-index-embeddings-ollama
  • python313Packages.llama-index-embeddings-ollama
  • pkgsRocm.python3Packages.llama-index-llms-ollama
  • pkgsRocm.python3Packages.llama-index-embeddings-ollama
  4 months, 2 weeks ago
• @LeSuisse restored package ollama-cpu 4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

Ollama Tensor Model Transfer transfer.go digestToPath path traversal

Ignored references (3)

• VDB-359599 | Ollama Tensor Model Transfer transfer.go digestToPath path traversal technical-descriptionvdb-entry
• VDB-359599 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• Submit #797576 | Ollama v0.20.2 Information Disclosure third-party-advisory

---

Ollama

• ==0.20.0
• ==0.20.2
• ==0.20.1

PoC: https://github.com/davidrxchester/CVE-2026-7020

NIXPKGS-2026-1277

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-41323

8.1 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): None (N)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 3 weeks ago
• @LeSuisse ignored package kyverno-chainsaw 4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

Kyverno: ServiceAccount token leaked to external servers via apiCall service URL

• https://github.com/kyverno/kyverno/security/advisories/GHSA-f9g8-6ppc-pqq4 exploitx_refsource_CONFIRM
• https://github.com/kyverno/kyverno/commit/f70e8ac1e7acd2e3844f9553e4a884f07f953de0 x_refsource_MISC

Ignored references (2)

• https://github.com/kyverno/kyverno/commit/bc4f91c4801b1eaa2edc0a14e2f1b0af8cf0c1f5 x_refsource_MISC
• https://github.com/kyverno/kyverno/commit/c2eab00033e635bda4e4efb58c1b472b41728bb6 x_refsource_MISC

---

kyverno

• ==>= 1.17.0-rc1, < 1.17.2-rc1
• ==< 1.16.4

NIXPKGS-2026-1276

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-41328

9.1 CRITICAL

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): None (N)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 3 weeks ago
• @LeSuisse ignored
  5 packages

  • coqPackages.dpdgraph
  • perlPackages.GDGraph
  • perl5Packages.GDGraph
  • perl538Packages.GDGraph
  • perl540Packages.GDGraph
  4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field

• https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4 x_refsource_CONFIRMexploit

---

dgraph

• ==< 25.3.3

NIXPKGS-2026-1275

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-41179

updated 4 months, 2 weeks ago by @LeSuisse Activity log

• Created suggestion 4 months, 3 weeks ago
• @LeSuisse ignored
  9 packages

  • librclone
  • rclone-ui
  • syncrclone
  • rclone-browser
  • git-annex-remote-rclone
  • gnomeExtensions.rclone-manager
  • python312Packages.rclone-python
  • python313Packages.rclone-python
  • python314Packages.rclone-python
  4 months, 2 weeks ago
• @LeSuisse accepted 4 months, 2 weeks ago
• @LeSuisse published on GitHub 4 months, 2 weeks ago

RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution

• https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q x_refsource_CONFIRM

Ignored references (3)

• https://github.com/rclone/rclone/blob/bf55d5e6d37fd86164a87782191f9e1ffcaafa82/backend/webdav/webdav.go x_refsource_MISC
• https://github.com/rclone/rclone/blob/bf55d5e6d37fd86164a87782191f9e1ffcaafa82/fs/operations/rc.go x_refsource_MISC
• https://github.com/rclone/rclone/blob/bf55d5e6d37fd86164a87782191f9e1ffcaafa82/fs/rc/cache.go x_refsource_MISC

---

rclone

• ==>= 1.48.0, < 1.73.5