NIXPKGS-2026-0782

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-33153

updated 5 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored package gnome-recipes 5 months, 3 weeks ago
@LeSuisse accepted 5 months, 3 weeks ago
@LeSuisse published on GitHub 5 months, 3 weeks ago

Tandoor Recipes's Unauthenticated Debug Parameter Leaks Full Raw SQL Queries Including Schema, Table Names, and Access Control Logic

https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-f83r-v3h5-pchf x_refsource_CONFIRM
https://github.com/TandoorRecipes/recipes/releases/tag/2.6.0 x_refsource_MISC

recipes

==< 2.6.0

Upstream advisory: https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-f83r-v3h5-pchf

NIXPKGS-2026-0783

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-33640

updated 5 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored
17 packages
- go-outline
- mdbook-pdf-outline
- typstPackages.suboutline
- python312Packages.outlines
- python313Packages.outlines
- typstPackages.suboutline_0_1_0
- typstPackages.suboutline_0_2_0
- typstPackages.suboutline_0_3_0
- mplus-outline-fonts.osdnRelease
- python312Packages.outlines-core
- python313Packages.outlines-core
- python314Packages.outlines-core
- typstPackages.outline-summaryst
- mplus-outline-fonts.githubRelease
- pkgsRocm.python3Packages.outlines
- typstPackages.outline-summaryst_0_1_0
- pkgsRocm.python3Packages.outlines-core
5 months, 3 weeks ago
@LeSuisse accepted 5 months, 3 weeks ago
@LeSuisse published on GitHub 5 months, 3 weeks ago

Outline has a rate limit bypass that allows brute force of email login OTP

https://github.com/outline/outline/security/advisories/GHSA-cwhc-53hw-qqx6 x_refsource_CONFIRM
https://github.com/outline/outline/releases/tag/v1.6.0 x_refsource_MISC

outline

==>= 0.86.0, < 1.6.0

Upstream advisory: https://github.com/outline/outline/security/advisories/GHSA-cwhc-53hw-qqx6

NIXPKGS-2026-0785

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-33320

6.2 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 5 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse accepted 5 months, 3 weeks ago
@LeSuisse published on GitHub 5 months, 3 weeks ago

Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service

https://github.com/TomWright/dasel/security/advisories/GHSA-4fcp-jxh7-23x8 x_refsource_CONFIRM

dasel

==>= 3.0.0, < 3.3.2

Upstream advisory: https://github.com/TomWright/dasel/security/advisories/GHSA-4fcp-jxh7-23x8

NIXPKGS-2026-0786

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-34352

8.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 5 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse accepted 5 months, 3 weeks ago
@LeSuisse published on GitHub 5 months, 3 weeks ago

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users …

TigerVNC

<1.16.2

Upstream announce: https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI

NIXPKGS-2026-0815

GitHub issue published 5 months, 3 weeks ago

          Permalink
          
            CVE-2026-4833
          
        3.3 LOW
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): Low (L)
        
          Exploit Code Maturity (E): Proof-of-Concept (P)
        
          Remediation Level (RL): Not Defined (X)
        
          Report Confidence (RC): Confirmed (C)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): Low (L)
        
              updated
            
          5 months, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          5 months, 3 weeks ago
          
            Orc discount Markdown markdown.c compile recursion
          
      VDB-353138 | Orc discount Markdown markdown.c compile recursion
    
    technical-descriptionvdb-entry
  
      VDB-353138 | CTI Indicators (IOB, IOC, IOA)
    
    permissions-requiredsignature
  
      Submit #775841 | Orc discount 3.0.1.2 Memory Corruption
    
    third-party-advisory
  
      https://github.com/Orc/discount/issues/305
    
    issue-tracking
  
      https://github.com/Orc/discount/issues/305#issuecomment-4027546673
    
    issue-tracking
  
      https://github.com/user-attachments/files/25847391/crash00.md
    
    exploit
  
      https://github.com/Orc/discount/
    
    product
  
    discount

            ==3.0.1.0
          
            ==3.0.1.2
          
            ==3.0.1.1
          
            Upstream issue: https://github.com/Orc/discount/issues/305

NIXPKGS-2026-0813

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-33505

7.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 5 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse accepted 5 months, 3 weeks ago
@LeSuisse published on GitHub 5 months, 3 weeks ago

Ory Keto has a SQL injection via forged pagination tokens

https://github.com/ory/keto/security/advisories/GHSA-c38g-mx2c-9wf2 x_refsource_CONFIRM

keto

==< 26.2.0

Upstream advisory: https://github.com/ory/keto/security/advisories/GHSA-c38g-mx2c-9wf2

NIXPKGS-2026-0811

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-33152

9.1 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 5 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored package gnome-recipes 5 months, 3 weeks ago
@LeSuisse accepted 5 months, 3 weeks ago
@LeSuisse published on GitHub 5 months, 3 weeks ago

Tandoor Recipes Vulnerable to Unrestricted Brute-Force via BasicAuthentication

https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-7m7c-jjqc-r522 x_refsource_CONFIRM
https://github.com/TandoorRecipes/recipes/releases/tag/2.6.0 x_refsource_MISC

recipes

==< 2.6.0

Upstream advisory: https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-7m7c-jjqc-r522

NIXPKGS-2026-0809

GitHub issue published 5 months, 3 weeks ago

          Permalink
          
            CVE-2026-30892
          
        0.0 NONE
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): None (N)
        
              updated
            
          5 months, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
                8 packages
                nym
crunch
y-cruncher
speedcrunch
ocaml-crunch
ocamlPackages.crunch
ocamlPackages_latest.crunch
vscode-extensions.42crunch.vscode-openapi

          5 months, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          5 months, 3 weeks ago
          
            Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation
          
      https://github.com/containers/crun/security/advisories/GHSA-4vg2-xjqj-7chj
    
    x_refsource_CONFIRM
  
      https://github.com/containers/crun/commit/1bd7f42446999b0e76bc3d575392e05c943b0b01
    
    x_refsource_MISC
  
      https://github.com/containers/crun/releases/tag/1.27
    
    x_refsource_MISC
  
    crun

            ==>= 1.19, < 1.27
          
            Upstream advisory: https://github.com/containers/crun/security/advisories/GHSA-4vg2-xjqj-7chj
Upstream patch: https://github.com/containers/crun/commit/1bd7f42446999b0e76bc3d575392e05c943b0b01

NIXPKGS-2026-0807

GitHub issue published 5 months, 3 weeks ago

          Permalink
          
            CVE-2026-4887
          
        6.1 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          5 months, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
                29 packages
                zigimports
gimpPlugins.bimp
gimpPlugins.gimp
gimpPlugins.gmic
gimp-with-plugins
gimp2Plugins.bimp
gimp2Plugins.gimp
gimp2Plugins.gmic
gimp3Plugins.gimp
gimp3Plugins.gmic
gimp2-with-plugins
gimp3-with-plugins
gimpPlugins.fourier
gimp2Plugins.fourier
gimpPlugins.farbfeld
gimp2Plugins.farbfeld
gimpPlugins.lightning
gimpPlugins.lqrPlugin
gimpPlugins.texturize
gimp2Plugins.lightning
gimp2Plugins.lqrPlugin
gimp2Plugins.texturize
gimp3Plugins.lightning
gimpPlugins.gimplensfun
gimp2Plugins.gimplensfun
gimpPlugins.resynthesizer
gimp3
gimpPlugins.waveletSharpen
gimp2Plugins.waveletSharpen

          5 months, 3 weeks ago
          
          @LeSuisse
          
              restored
            
              package gimp3
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          5 months, 3 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          5 months, 3 weeks ago
          
            Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image
          
      https://access.redhat.com/security/cve/CVE-2026-4887
    
    x_refsource_REDHATvdb-entry
  
      RHBZ#2451669
    
    x_refsource_REDHATissue-tracking
  
      https://gitlab.gnome.org/GNOME/gimp/-/issues/15960
    
    gimp

    gimp:2.8/gimp

            Upstream advisory: https://gitlab.gnome.org/GNOME/gimp/-/issues/15960

NIXPKGS-2026-0804

GitHub issue published 5 months, 3 weeks ago

Permalink CVE-2026-33149

8.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 5 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 3 weeks ago
@LeSuisse ignored package gnome-recipes 5 months, 3 weeks ago
@LeSuisse accepted 5 months, 3 weeks ago
@LeSuisse published on GitHub 5 months, 3 weeks ago

Tandoor Recipes Vulnerable to Host Header Injection

https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-x636-4jx6-xc4w x_refsource_CONFIRM

recipes

==<= 2.5.3

Upstream advisory: https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-x636-4jx6-xc4w

Nixpkgs security tracker

Published issues

Tandoor Recipes's Unauthenticated Debug Parameter Leaks Full Raw SQL Queries Including Schema, Table Names, and Access Control Logic

Outline has a rate limit bypass that allows brute force of email login OTP

Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service

In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users …

Orc discount Markdown markdown.c compile recursion

Ory Keto has a SQL injection via forged pagination tokens

Tandoor Recipes Vulnerable to Unrestricted Brute-Force via BasicAuthentication

Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

Tandoor Recipes Vulnerable to Host Header Injection