NIXPKGS-2026-2128

GitHub issue published 2 weeks, 5 days ago

siyuan: security issues < 3.7.1

Permalink CVE-2026-59832

7.7 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Changed (C)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 2 weeks, 5 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 5 days ago
• @LeSuisse accepted 2 weeks, 5 days ago
• @LeSuisse published on GitHub 2 weeks, 5 days ago

SiYuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-275h-v5h9-vr82 x_refsource_CONFIRM
• https://github.com/siyuan-note/siyuan/commit/68cc0f537dfa4502496dfa794e71835421c25c09 x_refsource_MISC
• https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1 x_refsource_MISC

---

siyuan

• ==< 3.7.1

Permalink CVE-2026-59855

8.6 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Active (A)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Active (A)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 2 weeks, 5 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 5 days ago
• @LeSuisse accepted 2 weeks, 5 days ago
• @LeSuisse published on GitHub 2 weeks, 5 days ago

SiYuan: Store XSS To Rce via Asset.render

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-w3gq-5j72-36vc x_refsource_CONFIRM
• https://github.com/siyuan-note/siyuan/commit/efbe3a557720034782643e55c9e0282530cb6bbb x_refsource_MISC
• https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1 x_refsource_MISC

---

siyuan

• ==< 3.7.1

Permalink CVE-2026-59833

8.6 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Active (A)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Active (A)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 2 weeks, 5 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 5 days ago
• @LeSuisse accepted 2 weeks, 5 days ago
• @LeSuisse published on GitHub 2 weeks, 5 days ago

SiYuan: Stored XSS to RCE in SiYuan via a per-attribute URL-scheme sanitizer gap in Lute (form action / SVG xlink:href)

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-97xv-3v84-h358 x_refsource_CONFIRM
• https://github.com/siyuan-note/siyuan/commit/ebe252e61fb93f258d083b9da0fa403679fdf94a x_refsource_MISC
• https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1 x_refsource_MISC

---

siyuan

• ==< 3.7.1

Permalink CVE-2026-59853

6.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 2 weeks, 5 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 5 days ago
• @LeSuisse accepted 2 weeks, 5 days ago
• @LeSuisse published on GitHub 2 weeks, 5 days ago

SiYuan: Publish-mode Reader can exfiltrate private saved-search Criteria via /api/storage/getCriteria (missing publish-access filter)

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-px3c-cf92-9g83 x_refsource_CONFIRM
• https://github.com/siyuan-note/siyuan/commit/0049d0f04ffe9837760d29248b9ef31605077d36 x_refsource_MISC
• https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1 x_refsource_MISC

---

siyuan

• ==< 3.7.1

Permalink CVE-2026-59854

4.9 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): High (H)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 2 weeks, 5 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 5 days ago
• @LeSuisse accepted 2 weeks, 5 days ago
• @LeSuisse published on GitHub 2 weeks, 5 days ago

SiYuan: Incomplete IsSensitivePath denylist: globalCopyFiles reads home-dir credential dotfiles into the workspace

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vmm8-3ccv-ppvw x_refsource_CONFIRM
• https://github.com/siyuan-note/siyuan/commit/914c5180a88d17f6d38716a56483327b367ef55f x_refsource_MISC
• https://github.com/siyuan-note/siyuan/commit/b54fee401799d987d2fd2888220938ad599b8c5e x_refsource_MISC
• https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1 x_refsource_MISC

---

siyuan

• ==< 3.7.1

Permalink CVE-2026-59834

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 2 weeks, 5 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 5 days ago
• @LeSuisse accepted 2 weeks, 5 days ago
• @LeSuisse published on GitHub 2 weeks, 5 days ago

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h89q-4j2h-7h88 x_refsource_CONFIRM
• https://github.com/siyuan-note/siyuan/commit/57bcad4b331836880bfe6be25d4180bdcf10db0d x_refsource_MISC
• https://github.com/siyuan-note/siyuan/commit/d0f0fe146fb07d594fcadc4f48d4f7c30ac01d1e x_refsource_MISC
• https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1 x_refsource_MISC

---

siyuan

• ==< 3.7.1

NIXPKGS-2026-2127

GitHub issue published 2 weeks, 6 days ago

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

Permalink CVE-2026-58494

6.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Changed (C)
• Confidentiality (C): None (N)
• Integrity (I): High (H)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): None (N)

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse ignored
  2 packages

  • python313Packages.wasmtime
  • python314Packages.wasmtime
  2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4ch3-9j33-3pmj x_refsource_CONFIRM
• https://github.com/bytecodealliance/wasmtime/commit/5ddfd5f1ef28f2041fa07d237ad0336e167b0e0c x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/commit/7db94cdcf0c79cb3dfde884b534b653f2dd83367 x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/commit/8a250aac0962ca1364b5f16525720e9d0b39edcd x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/commit/d3ceb56ec35f39e02496eeb4e2d9c7f4fb964d9e x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/releases/tag/v24.0.11 x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/releases/tag/v36.0.12 x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/releases/tag/v45.0.3 x_refsource_MISC
• https://github.com/bytecodealliance/wasmtime/releases/tag/v46.0.1 x_refsource_MISC

---

wasmtime

• ==>= 25.0.0, < 36.0.12
• ==>= 46.0.0, < 46.0.1
• ==>= 37.0.0, < 45.0.3
• ==< 24.0.11

NIXPKGS-2026-2126

GitHub issue published 2 weeks, 6 days ago

bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

Permalink CVE-2026-15035

1.9 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse ignored
  4 references

  • https://github.com/bentoml/OpenLLM/
  • Submit #850895 | Bentoml OpenLLM 0.6.30…
  • CVE-2026-15035 | CVE Analysis and Report
  • VDB-376786 | CTI Indicators (IOB, IOC, …
  2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

• VDB-376786 | bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection technical-descriptionvdb-entry
• https://github.com/bentoml/OpenLLM/issues/1229 exploitissue-tracking
• https://github.com/bentoml/OpenLLM/pull/1235 patchissue-tracking

Ignored references (4)

• https://github.com/bentoml/OpenLLM/ product
• Submit #850895 | Bentoml OpenLLM 0.6.30 Command Injection third-party-advisory
• CVE-2026-15035 | CVE Analysis and Report third-party-advisory
• VDB-376786 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature

---

OpenLLM

• ==0.6.30

NIXPKGS-2026-2125

GitHub issue published 2 weeks, 6 days ago

etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation

Permalink CVE-2026-59818

6.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): High (H)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): None (N)

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse ignored
  20 packages

  • netcdf
  • pnetcdf
  • netcdf-mpi
  • netcdfcxx4
  • netcdffortran
  • pkgsRocm.pnetcdf
  • pkgsRocm.netcdf-mpi
  • octavePackages.netcdf
  • python313Packages.etcd
  • python314Packages.etcd
  • python313Packages.aetcd
  • python313Packages.etcd3
  • python314Packages.aetcd
  • python314Packages.etcd3
  • python313Packages.netcdf4
  • python314Packages.netcdf4
  • python313Packages.h5netcdf
  • python314Packages.h5netcdf
  • python313Packages.python-etcd
  • python314Packages.python-etcd
  2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation

• https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92 x_refsource_CONFIRM
• https://github.com/etcd-io/etcd/pull/22007 x_refsource_MISC
• https://github.com/etcd-io/etcd/pull/22021 x_refsource_MISC
• https://github.com/etcd-io/etcd/pull/22025 x_refsource_MISC
• https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef x_refsource_MISC
• https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f x_refsource_MISC
• https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb x_refsource_MISC
• https://github.com/etcd-io/etcd/releases/tag/v3.5.32 x_refsource_MISC
• https://github.com/etcd-io/etcd/releases/tag/v3.6.13 x_refsource_MISC

---

etcd

• ==>= 3.6.0-alpha.0, < 3.6.13
• ==< 3.5.32

NIXPKGS-2026-2124

GitHub issue published 2 weeks, 6 days ago

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

Permalink CVE-2026-59939

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse ignored
  2 packages

  • python313Packages.google-auth-httplib2
  • python314Packages.google-auth-httplib2
  2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

• https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3 x_refsource_CONFIRM
• https://github.com/httplib2/httplib2/commit/87581ad6cf752fe3da2090c59058261d2d00a427 x_refsource_MISC
• https://github.com/httplib2/httplib2/releases/tag/v0.32.0 x_refsource_MISC

---

httplib2

• ==< 0.32.0

NIXPKGS-2026-2123

GitHub issue published 2 weeks, 6 days ago

Snipe-IT's selectlist visibility is too permissive

Permalink CVE-2026-48492

4.9 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Unreported (U)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

Snipe-IT's selectlist visibility is too permissive

• https://github.com/grokability/snipe-it/security/advisories/GHSA-f3c5-6cw8-fg57 x_refsource_CONFIRM
• https://github.com/grokability/snipe-it/commit/4f943d4a7ab8e53f3d9e32770602d1118bab005f x_refsource_MISC

---

snipe-it

• ==< 8.5.1

NIXPKGS-2026-2122

GitHub issue published 2 weeks, 6 days ago

Heap-based Buffer Overflow in Wireshark

Permalink CVE-2026-15173

4.7 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

Heap-based Buffer Overflow in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-53.html
• https://gitlab.com/wireshark/wireshark/-/work_items/21285

---

Wireshark

• <4.6.7

NIXPKGS-2026-2121

GitHub issue published 2 weeks, 6 days ago

ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

Permalink CVE-2026-44512

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse ignored
  39 packages

  • onnxruntime
  • sherpa-onnx
  • pkgsRocm.onnxruntime
  • pkgsRocm.sherpa-onnx
  • python313Packages.onnx
  • python314Packages.onnx
  • python313Packages.onnx-ir
  • python313Packages.tf2onnx
  • python314Packages.onnx-ir
  • python313Packages.onnx-asr
  • python313Packages.onnxslim
  • python313Packages.skl2onnx
  • python314Packages.onnx-asr
  • python314Packages.onnxslim
  • python314Packages.skl2onnx
  • python313Packages.onnxscript
  • python314Packages.onnxscript
  • python313Packages.onnxmltools
  • python313Packages.onnxruntime
  • python313Packages.sherpa-onnx
  • python314Packages.onnxmltools
  • python314Packages.onnxruntime
  • python314Packages.sherpa-onnx
  • python313Packages.optimum-onnx
  • python314Packages.optimum-onnx
  • pkgsRocm.python3Packages.onnx-ir
  • pkgsRocm.python3Packages.tf2onnx
  • pkgsRocm.python3Packages.onnx-asr
  • pkgsRocm.python3Packages.onnxscript
  • python313Packages.onnxruntime-tools
  • python314Packages.onnxruntime-tools
  • pkgsRocm.python3Packages.onnxruntime
  • pkgsRocm.python3Packages.sherpa-onnx
  • pkgsRocm.python3Packages.optimum-onnx
  • python313Packages.onnxconverter-common
  • python313Packages.rapidocr-onnxruntime
  • python314Packages.onnxconverter-common
  • python314Packages.rapidocr-onnxruntime
  • pkgsRocm.python3Packages.rapidocr-onnxruntime
  2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

• https://github.com/onnx/onnx/security/advisories/GHSA-hwpq-hmq9-wj77 x_refsource_CONFIRM
• https://github.com/onnx/onnx/pull/7813 x_refsource_MISC
• https://github.com/onnx/onnx/commit/cd310408165ad47c3cd7eb2b86cb5b80aa2e4fdf x_refsource_MISC
• https://github.com/onnx/onnx/releases/tag/v1.22.0 x_refsource_MISC

---

onnx

• ==>= 1.9.0, < 1.22.0

NIXPKGS-2026-2120

GitHub issue published 2 weeks, 6 days ago

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Permalink CVE-2026-14454

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse ignored
  10 packages

  • imager
  • usbimager
  • vcdimager
  • rpi-imager
  • gImageReader
  • gimagereader
  • gImageReader-qt
  • gimagereader-qt
  • perlPackages.ImagerQRCode
  • perl5Packages.ImagerQRCode
  2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

• https://metacpan.org/release/TONYC/Imager-1.033/changes release-notes
• https://github.com/tonycoz/imager/commit/06f01a5d0fd591259aeba589370d6888384a6b… patch
• http://www.openwall.com/lists/oss-security/2026/07/08/6

---

Imager

• <1.033

NIXPKGS-2026-2119

GitHub issue published 2 weeks, 6 days ago

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

Permalink CVE-2026-59822

8.8 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 2 weeks, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 6 days ago
• @LeSuisse accepted 2 weeks, 6 days ago
• @LeSuisse published on GitHub 2 weeks, 6 days ago

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

• https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q x_refsource_CONFIRM
• https://github.com/BerriAI/litellm/pull/26463 x_refsource_MISC
• https://github.com/BerriAI/litellm/commit/73869f0faf7d11ee21adcb5f91b8c33a340b6c2c x_refsource_MISC
• https://github.com/BerriAI/litellm/releases/tag/v1.84.0 x_refsource_MISC

---

litellm

• ==< 1.84.0

Needs some backports to stable