NIXPKGS-2026-0859

GitHub issue published 5 months, 2 weeks ago

Permalink CVE-2026-33986

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 5 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 5 months, 2 weeks ago
@mweinelt accepted 5 months, 2 weeks ago
@mweinelt published on GitHub 5 months, 2 weeks ago

FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h6qw-wxvm-hf97 x_refsource_CONFIRM
https://github.com/FreeRDP/FreeRDP/commit/f6e43e208958140074ae9bb93cd0c9045a371c77 x_refsource_MISC

FreeRDP

==< 3.24.2

https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h6qw-wxvm-hf97

NIXPKGS-2026-0838

GitHub issue published 5 months, 2 weeks ago

Permalink CVE-2026-4946

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 5 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 2 weeks ago
@LeSuisse ignored
12 packages
- rizinPlugins.rz-ghidra
- cutterPlugins.rz-ghidra
- ghidra-extensions.ret-sync
- python313Packages.pyghidra
- python314Packages.pyghidra
- python312Packages.ghidra-bridge
- python313Packages.ghidra-bridge
- python314Packages.ghidra-bridge
- ghidra-extensions.ghidra-firmware-utils
- ghidra-extensions.ghidra-delinker-extension
- ghidra-extensions.ghidraninja-ghidra-scripts
- ghidra-extensions.ghidra-golanganalyzerextension
5 months, 2 weeks ago
@LeSuisse accepted 5 months, 2 weeks ago
@LeSuisse published on GitHub 5 months, 2 weeks ago

NSA Ghidra Auto-Analysis Annotation Command Execution

https://takeonme.org/gcves/GCVE-1337-2026-0000000000000000000000000000000000000… third-party-advisory
https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-mc3p-… vendor-advisory

Ghidra

<12.0.3

Advisory: https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-mc3p-mq2p-xw6v

NIXPKGS-2026-0837

GitHub issue published 5 months, 2 weeks ago

Permalink CVE-2026-34385

updated 5 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
5 months, 2 weeks ago
@LeSuisse accepted 5 months, 2 weeks ago
@LeSuisse published on GitHub 5 months, 2 weeks ago

Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database

https://github.com/fleetdm/fleet/security/advisories/GHSA-v895-833r-8c45 x_refsource_CONFIRM

fleet

==< 4.81.0

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-v895-833r-8c45

NIXPKGS-2026-0833

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-34389

updated 5 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
5 months, 2 weeks ago
@LeSuisse accepted 5 months, 2 weeks ago
@LeSuisse published on GitHub 5 months, 2 weeks ago

Fleet's user account creation via invite does not enforce invited email address

https://github.com/fleetdm/fleet/security/advisories/GHSA-4f9r-x588-pp2h x_refsource_CONFIRM

fleet

==< 4.81.0

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-4f9r-x588-pp2h

NIXPKGS-2026-0835

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-34387

updated 5 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
5 months, 2 weeks ago
@LeSuisse accepted 5 months, 2 weeks ago
@LeSuisse published on GitHub 5 months, 2 weeks ago

Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts

https://github.com/fleetdm/fleet/security/advisories/GHSA-7rhw-5mpv-gp4h x_refsource_CONFIRM

fleet

==< 4.81.1

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-7rhw-5mpv-gp4h

NIXPKGS-2026-0834

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-34388

updated 5 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
5 months, 2 weeks ago
@LeSuisse accepted 5 months, 2 weeks ago
@LeSuisse published on GitHub 5 months, 2 weeks ago

Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint

https://github.com/fleetdm/fleet/security/advisories/GHSA-w254-4hp5-7cvv x_refsource_CONFIRM

fleet

==< 4.81.0

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-w254-4hp5-7cvv

NIXPKGS-2026-0832

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-29180

updated 5 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
5 months, 2 weeks ago
@LeSuisse accepted 5 months, 2 weeks ago
@LeSuisse published on GitHub 5 months, 2 weeks ago

Fleet's team maintainer can transfer hosts from any team via missing source team authorization

https://github.com/fleetdm/fleet/security/advisories/GHSA-m2h6-4xpq-qw3m x_refsource_CONFIRM

fleet

==< 4.81.1

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-m2h6-4xpq-qw3m

NIXPKGS-2026-0830

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-34386

updated 5 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored
20 packages
- fleetctl
- fleeting-plugin-aws
- azure-cli-extensions.fleet
- python312Packages.tesla-fleet-api
- python313Packages.tesla-fleet-api
- python314Packages.tesla-fleet-api
- haskellPackages.amazonka-iotfleethub
- haskellPackages.amazonka-iotfleetwise
- python312Packages.mypy-boto3-iotfleethub
- python313Packages.mypy-boto3-iotfleethub
- python314Packages.mypy-boto3-iotfleethub
- python312Packages.mypy-boto3-iotfleetwise
- python313Packages.mypy-boto3-iotfleetwise
- python314Packages.mypy-boto3-iotfleetwise
- home-assistant-component-tests.tesla_fleet
- python312Packages.types-aiobotocore-iotfleethub
- python313Packages.types-aiobotocore-iotfleethub
- python312Packages.types-aiobotocore-iotfleetwise
- python313Packages.types-aiobotocore-iotfleetwise
- tests.home-assistant-component-tests.tesla_fleet
5 months, 2 weeks ago
@LeSuisse accepted 5 months, 2 weeks ago
@LeSuisse published on GitHub 5 months, 2 weeks ago

Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin

https://github.com/fleetdm/fleet/security/advisories/GHSA-9p23-p2m4-2r4m x_refsource_CONFIRM

fleet

==< 4.81.0

Advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-9p23-p2m4-2r4m

NIXPKGS-2026-0828

GitHub issue published 5 months, 3 weeks ago

          Permalink
          
            CVE-2026-4988
          
        3.7 LOW
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): High (H)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): Low (L)
        
          Exploit Code Maturity (E): Proof-of-Concept (P)
        
          Remediation Level (RL): Not Defined (X)
        
          Report Confidence (RC): Reasonable (R)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): High (H)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): Low (L)
        
              updated
            
          5 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
              package open5gs-webui
            
          5 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          5 months, 2 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          5 months, 2 weeks ago
          
            Open5GS CCA Message smf_s6b denial of service
          
      VDB-353875 | Open5GS CCA Message smf_s6b denial of service
    
    technical-descriptionvdb-entry
  
      VDB-353875 | CTI Indicators (IOB, IOC, TTP, IOA)
    
    permissions-requiredsignature
  
      Submit #771349 | Open5GS SMF v2.7.6 Denial of Service
    
    third-party-advisory
  
      https://github.com/open5gs/open5gs/issues/4342
    
    issue-tracking
  
      https://github.com/open5gs/open5gs/issues/4342#issue-4021772232
    
    issue-trackingexploit
  
      https://github.com/open5gs/open5gs/
    
    product
  
    Open5GS

            ==2.7.6
          
            Upstream issue: https://github.com/open5gs/open5gs/issues/4342

NIXPKGS-2026-0826

GitHub issue published 5 months, 3 weeks ago

          Permalink
          
            CVE-2026-33433
          
              updated
            
          5 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
              package traefik-certs-dumper
            
          5 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          5 months, 2 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          5 months, 2 weeks ago
          
            Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField
          
      https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c
    
    x_refsource_CONFIRM
  
      https://github.com/traefik/traefik/releases/tag/v2.11.42
    
    x_refsource_MISC
  
      https://github.com/traefik/traefik/releases/tag/v3.6.11
    
    x_refsource_MISC
  
      https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3
    
    x_refsource_MISC
  
    traefik

            ==>= 3.0.0-beta1, < 3.6.11
          
            ==>= 3.7.0-ea.1, < 3.7.0-ea.3
          
            ==< 2.11.42
          
            Advisory: https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c

Nixpkgs security tracker

Published issues

FreeRDP: H.264 YUV Buffer Dimension Desync - Heap OOB Write

NSA Ghidra Auto-Analysis Annotation Command Execution

Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database

Fleet's user account creation via invite does not enforce invited email address

Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts

Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint

Fleet's team maintainer can transfer hosts from any team via missing source team authorization

Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin

Open5GS CCA Message smf_s6b denial of service

Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField