NIXPKGS-2026-0611

GitHub issue published 3 months, 2 weeks ago

Permalink CVE-2026-30931

6.8 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): High (H)

updated 3 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 3 months, 2 weeks ago
@mweinelt ignored
6 packages
- imagemagick6
- imagemagick6Big
- imagemagick6_light
- graphicsmagick-imagemagick-compat
- tests.pkg-config.defaultPkgConfigPackages.MagickWand
- tests.pkg-config.defaultPkgConfigPackages.ImageMagick
3 months, 2 weeks ago
@mweinelt accepted 3 months, 2 weeks ago
@mweinelt published on GitHub 3 months, 2 weeks ago

ImageMagick has a heap-based buffer overflow in UHDR encoder

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h95r-c8c7-mrwx x_refsource_CONFIRM

ImageMagick

==< 7.1.2-16

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h95r-c8c7-mrwx

NIXPKGS-2026-0606

GitHub issue published 3 months, 2 weeks ago

          Permalink
          
            CVE-2025-62166
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): None (N)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): None (N)
        
              updated
            
          3 months, 2 weeks ago
          by @mweinelt
        
      Activity log
    
              Created suggestion
            
          3 months, 2 weeks ago
          
          @mweinelt
          
              ignored
            
                7 packages
                freshrss-extensions.demo
freshrss-extensions.youtube
freshrss-extensions.auto-ttl
freshrss-extensions.title-wrap
freshrss-extensions.reading-time
freshrss-extensions.reddit-image
freshrss-extensions.unsafe-auto-login

          3 months, 2 weeks ago
          
          @mweinelt
          
              accepted
            
          3 months, 2 weeks ago
          
          @mweinelt
          
              published on GitHub
            
          3 months, 2 weeks ago
          
            FreshRSS has an IDOR which allows for viewing feeds of any user and leaking tokens
          
      https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-w743-fg6g-mhwh
    
    x_refsource_CONFIRM
  
      https://github.com/FreshRSS/FreshRSS/pull/8165
    
    x_refsource_MISC
  
      https://github.com/FreshRSS/FreshRSS/commit/60cf5ea297a17db861e73cd65d7b7862bd6bcc24
    
    x_refsource_MISC
  
      https://github.com/FreshRSS/FreshRSS/releases/tag/1.28.0
    
    x_refsource_MISC
  
    FreshRSS

            ==< 1.28.0
          
          https://github.com/NixOS/nixpkgs/pull/473921

Patch not backported

NIXPKGS-2026-0618

GitHub issue published 3 months, 2 weeks ago

Permalink CVE-2026-23868

updated 3 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 3 months, 2 weeks ago
@mweinelt accepted 3 months, 2 weeks ago
@mweinelt published on GitHub 3 months, 2 weeks ago

Giflib contains a double-free vulnerability that is the result of …

https://www.facebook.com/security/advisories/cve-2026-23868 x_refsource_CONFIRM
https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c1… x_refsource_CONFIRM

giflib

=<6.1.1

https://www.facebook.com/security/advisories/cve-2026-23868
https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7

NIXPKGS-2026-0602

GitHub issue published 3 months, 2 weeks ago

Permalink CVE-2026-28689

6.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 3 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 3 months, 2 weeks ago
@mweinelt ignored
6 packages
- imagemagick6
- imagemagick6Big
- imagemagick6_light
- graphicsmagick-imagemagick-compat
- tests.pkg-config.defaultPkgConfigPackages.MagickWand
- tests.pkg-config.defaultPkgConfigPackages.ImageMagick
3 months, 2 weeks ago
@mweinelt accepted 3 months, 2 weeks ago
@mweinelt published on GitHub 3 months, 2 weeks ago

ImageMagick has a Path Policy TOCTOU symlink race bypass

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx3 x_refsource_CONFIRM

ImageMagick

==>= 7.0.0, < 7.1.2-16
==< 6.9.13-41

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx3

NIXPKGS-2026-0582

GitHub issue published 3 months, 2 weeks ago

          Permalink
          
            CVE-2026-3706
          
        3.7 LOW
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): High (H)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): Low (L)
        
          Availability (A): None (N)
        
          Exploit Code Maturity (E): Proof-of-Concept (P)
        
          Remediation Level (RL): Official Fix (O)
        
          Report Confidence (RC): Confirmed (C)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): High (H)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): None (N)
        
              updated
            
          3 months, 2 weeks ago
          by @mweinelt
        
      Activity log
    
              Created suggestion
            
          3 months, 2 weeks ago
          
          @mweinelt
          
              accepted
            
          3 months, 2 weeks ago
          
          @mweinelt
          
              published on GitHub
            
          3 months, 2 weeks ago
          
            mkj Dropbear S Range Check curve25519.c unpackneg signature verification
          
      VDB-349652 | mkj Dropbear S Range Check curve25519.c unpackneg signature verification
    
    technical-descriptionvdb-entry
  
      VDB-349652 | CTI Indicators (IOB, IOC, IOA)
    
    permissions-requiredsignature
  
      Submit #765933 | GitHub Dropbear 2025.89 Improper Verification of Cryptographic Signature
    
    third-party-advisory
  
      https://github.com/str4d/ed25519-java/issues/82#issue-727629226
    
    issue-tracking
  
      https://github.com/mkj/dropbear/pull/407
    
    issue-trackingpatch
  
      https://github.com/mkj/dropbear/issues/406#issue-3978907798
    
    issue-trackingexploit
  
      https://github.com/mkj/dropbear/commit/fdec3c90a15447bd538641d85e5a3e3ac981011d
    
    patch
  
      https://github.com/mkj/dropbear/
    
    product
  
    Dropbear

            ==2025.79
          
            ==2025.46
          
            ==2025.88
          
            ==2025.26
          
            ==2025.43
          
            ==2025.75
          
            ==2025.64
          
            ==2025.51
          
            ==2025.62
          
            ==2025.12
          
            ==2025.6
          
            ==2025.73
          
            ==2025.83
          
            ==2025.47
          
            ==2025.5
          
            ==2025.8
          
            ==2025.78
          
            ==2025.21
          
            ==2025.34
          
            ==2025.4
          
            ==2025.20
          
            ==2025.86
          
            ==2025.56
          
            ==2025.50
          
            ==2025.69
          
            ==2025.16
          
            ==2025.14
          
            ==2025.41
          
            ==2025.87
          
            ==2025.58
          
            ==2025.7
          
            ==2025.54
          
            ==2025.45
          
            ==2025.59
          
            ==2025.52
          
            ==2025.40
          
            ==2025.80
          
            ==2025.84
          
            ==2025.19
          
            ==2025.55
          
            ==2025.71
          
            ==2025.77
          
            ==2025.15
          
            ==2025.85
          
            ==2025.76
          
            ==2025.70
          
            ==2025.33
          
            ==2025.65
          
            ==2025.48
          
            ==2025.57
          
            ==2025.9
          
            ==2025.61
          
            ==2025.0
          
            ==2025.44
          
            ==2025.37
          
            ==2025.22
          
            ==2025.38
          
            ==2025.82
          
            ==2025.63
          
            ==2025.36
          
            ==2025.17
          
            ==2025.1
          
            ==2025.11
          
            ==2025.24
          
            ==2025.81
          
            ==2025.32
          
            ==2025.66
          
            ==2025.25
          
            ==2025.89
          
            ==2025.18
          
            ==2025.27
          
            ==2025.67
          
            ==2025.3
          
            ==2025.29
          
            ==2025.28
          
            ==2025.23
          
            ==2025.53
          
            ==2025.72
          
            ==2025.2
          
            ==2025.30
          
            ==2025.42
          
            ==2025.68
          
            ==2025.31
          
            ==2025.35
          
            ==2025.74
          
            ==2025.49
          
            ==2025.39
          
            ==2025.60
          
            ==2025.10
          
            ==2025.13
          
          https://github.com/mkj/dropbear/issues/406#issue-3978907798
https://github.com/mkj/dropbear/pull/407

NIXPKGS-2026-0581

GitHub issue published 3 months, 2 weeks ago

          Permalink
          
            CVE-2026-3731
          
        5.3 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): Low (L)
        
          Exploit Code Maturity (E): Not Defined (X)
        
          Remediation Level (RL): Official Fix (O)
        
          Report Confidence (RC): Confirmed (C)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): Low (L)
        
              updated
            
          3 months, 2 weeks ago
          by @mweinelt
        
      Activity log
    
              Created suggestion
            
          3 months, 2 weeks ago
          
          @mweinelt
          
              ignored
            
                8 packages
                libssh2
haskellPackages.libssh
haskellPackages.libssh2
haskellPackages.libssh2-conduit
python312Packages.ansible-pylibssh
python313Packages.ansible-pylibssh
python314Packages.ansible-pylibssh
tests.pkg-config.defaultPkgConfigPackages.libssh2

          3 months, 2 weeks ago
          
          @mweinelt
          
              accepted
            
          3 months, 2 weeks ago
          
          @mweinelt
          
              published on GitHub
            
          3 months, 2 weeks ago
          
            libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds
          
      VDB-349709 | libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds
    
    technical-descriptionvdb-entry
  
      VDB-349709 | CTI Indicators (IOB, IOC, IOA)
    
    permissions-requiredsignature
  
      Submit #767120 | libssh.org libssh libssh < 0.11.4; < 0.12.0 Out-of-Bounds Read
    
    third-party-advisory
  
      https://www.libssh.org/security/advisories/libssh-2026-sftp-extensions.txt
    
    related
  
      https://gitlab.com/libssh/libssh-mirror/-/commit/855a0853ad3abd4a6cd85ce06fce6d…
    
    patch
  
      https://www.libssh.org/files/0.12/libssh-0.12.0.tar.xz
    
    patch
  
    libssh

            ==0.11.3
          
            ==0.12.0
          
            ==0.11.0
          
            ==0.11.2
          
            ==0.11.4
          
            ==0.11.1
          
          https://www.libssh.org/security/advisories/libssh-2026-sftp-extensions.txt

NIXPKGS-2026-0575

GitHub issue published 3 months, 2 weeks ago

Permalink CVE-2026-29195

updated 3 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 3 months, 2 weeks ago
@mweinelt accepted 3 months, 2 weeks ago
@mweinelt published on GitHub 3 months, 2 weeks ago

Netmaker: Privilege Escalation from Admin to Super-Admin via User Update

https://github.com/gravitl/netmaker/security/advisories/GHSA-ch3w-9456-38v3 x_refsource_CONFIRM
https://github.com/gravitl/netmaker/releases/tag/v1.5.0 x_refsource_MISC

netmaker

==< 1.5.0

Upstream advisory: https://github.com/gravitl/netmaker/security/advisories/GHSA-ch3w-9456-38v3

NIXPKGS-2026-0579

GitHub issue published 3 months, 2 weeks ago

Permalink CVE-2026-2219

updated 3 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 3 months, 2 weeks ago
@mweinelt accepted 3 months, 2 weeks ago
@mweinelt published on GitHub 3 months, 2 weeks ago

It was discovered that dpkg-deb (a component of dpkg, the …

https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=6610297a62c0780dd0e80b0e302e… patch
https://bugs.debian.org/1129722 issue-tracking

dpkg

<1.23.6

Upstream issue: https://bugs.debian.org/challenge.html?original=%2f1129722
Patch: https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=6610297a62c0780dd0e80b0e302ef64fdcc9d313

NIXPKGS-2026-0574

GitHub issue published 3 months, 2 weeks ago

Permalink CVE-2026-29067

8.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 3 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 3 months, 2 weeks ago
@mweinelt ignored package zitadel-tools 3 months, 2 weeks ago
@mweinelt accepted 3 months, 2 weeks ago
@mweinelt published on GitHub 3 months, 2 weeks ago

ZITADEL: Account Takeover Due to Improper Instance Validation in V2 Login

https://github.com/zitadel/zitadel/security/advisories/GHSA-pfrf-9r5f-73f5 x_refsource_CONFIRM

zitadel

==>= 4.0.0-rc.1, < 4.7.1

Upstream advisory: https://github.com/zitadel/zitadel/security/advisories/GHSA-pfrf-9r5f-73f5

NIXPKGS-2026-0569

GitHub issue published 3 months, 2 weeks ago

Permalink CVE-2026-29191

9.3 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 3 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 3 months, 2 weeks ago
@mweinelt ignored package zitadel-tools 3 months, 2 weeks ago
@mweinelt accepted 3 months, 2 weeks ago
@mweinelt published on GitHub 3 months, 2 weeks ago

ZITADEL: 1-Click Account Takeover via XSS in /saml-post Endpoint

https://github.com/zitadel/zitadel/security/advisories/GHSA-pr34-2v5x-6qjq x_refsource_CONFIRM

zitadel

==>= 4.0.0, < 4.12.0

Upstream advisory: https://github.com/zitadel/zitadel/security/advisories/GHSA-pr34-2v5x-6qjq

Nixpkgs security tracker

Published issues

ImageMagick has a heap-based buffer overflow in UHDR encoder

FreshRSS has an IDOR which allows for viewing feeds of any user and leaking tokens

Giflib contains a double-free vulnerability that is the result of …

ImageMagick has a Path Policy TOCTOU symlink race bypass

mkj Dropbear S Range Check curve25519.c unpackneg signature verification

libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds

Netmaker: Privilege Escalation from Admin to Super-Admin via User Update

It was discovered that dpkg-deb (a component of dpkg, the …

ZITADEL: Account Takeover Due to Improper Instance Validation in V2 Login

ZITADEL: 1-Click Account Takeover via XSS in /saml-post Endpoint