NIXPKGS-2026-1730

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-40034

8.5 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Passive (P)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Passive (P)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse ignored reference VulnCheck… 2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule

• GHSA Advisory GHSA-f26g-jm89-4g65 exploitvendor-advisory
• https://github.com/GitoxideLabs/gitoxide/commit/6a2e6a436f76c8bbf2487f9967413a51356667a0 patch
• https://github.com/GitoxideLabs/gitoxide/commit/dd5c18d9e526e8de462fa40aa047acd097cfa7dc patch
• Anthropic CVD Finding ANT-2026-6SNS6KMP third-party-advisory

Ignored references (1)

• VulnCheck Advisory: gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule third-party-advisory

---

gitoxide

• <0.82.0
• ==0.82.0

NIXPKGS-2026-1729

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-42496

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse ignored
  6 packages

  • haskellPackages.archive-tar
  • perlPackages.ArchiveTarWrapper
  • perl540Packages.ArchiveTar
  • perl5Packages.ArchiveTarWrapper
  • perl538Packages.ArchiveTarWrapper
  • perl540Packages.ArchiveTarWrapper
  2 weeks, 4 days ago
• @LeSuisse restored package perl540Packages.ArchiveTar 2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory

• https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2ccc… patch
• https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes release-notes
• https://www.cve.org/CVERecord?id=CVE-2026-42497 related

---

Archive-Tar

• <3.08

NIXPKGS-2026-1728

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-45082

7.6 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

Karakeep has a SSRF Protection Bypass via Redirect Handling

• https://github.com/karakeep-app/karakeep/security/advisories/GHSA-g647-327m-79g9 x_refsource_CONFIRMexploit

---

karakeep

• ==< 0.32.0

NIXPKGS-2026-1727

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-9605

5.5 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse ignored
  3 references

  • https://www.gnu.org/
  • Submit #818197 | LibreDWG libredwg (inc…
  • VDB-365678 | CTI Indicators (IOB, IOC, …
  2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow

• VDB-365678 | GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow technical-descriptionvdb-entry
• https://github.com/LibreDWG/libredwg/issues/1248 issue-tracking
• https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap… exploit
• https://github.com/LibreDWG/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be5… patch

Ignored references (3)

• VDB-365678 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• Submit #818197 | LibreDWG libredwg (including the dwgbmp utility) 0.13.4.8160 Buffer Overflow third-party-advisory
• https://www.gnu.org/ productbroken-link

---

libredwg

• ==0.13.4.8160

NIXPKGS-2026-1726

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-41401

7.1 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse ignored reference VulnCheck… 2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

libyang - Heap Use-After-Free Write in XML Metadata Parsing

• GHSA Advisory GHSA-9f49-8x56-jmjc exploitvendor-advisory
• https://github.com/CESNET/libyang/commit/6b5ed47ee674fbe86b31bbebc4ff26889aeff38c patch
• Anthropic CVD Finding ANT-2026-TZQ1KH7E third-party-advisoryexploit

Ignored references (1)

• VulnCheck Advisory: libyang - Heap Use-After-Free Write in XML Metadata Parsing third-party-advisory

---

libyang

• <5.4.3
• ==5.4.3

NIXPKGS-2026-1725

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-44775

6.9 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

Kavita: No authentication at /api/Reader/image

• https://github.com/Kareadita/Kavita/security/advisories/GHSA-6gc9-6r8p-5wg2 x_refsource_CONFIRM
• https://github.com/Kareadita/Kavita/blob/8c686df2dbc2d0a83120e8b3f8c1269107bb815d/API/Controllers/ReaderController.cs#L116 x_refsource_MISC

---

Kavita

• ==< 0.9.0

NIXPKGS-2026-1724

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-9538

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse ignored
  5 packages

  • perl540Packages.ArchiveTarWrapper
  • perl538Packages.ArchiveTarWrapper
  • perl5Packages.ArchiveTarWrapper
  • perlPackages.ArchiveTarWrapper
  • haskellPackages.archive-tar
  2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header

• https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd362694… patch
• https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes release-notes
• http://www.openwall.com/lists/oss-security/2026/05/26/4

---

Archive-Tar

• <3.10

NIXPKGS-2026-1723

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-44831

4.8 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Adjacent (A)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): Required (R)
• Scope (S): Changed (C)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Adjacent (A)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): None (N)

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

Snipe-IT: XSS vulnerability in component notes

• https://github.com/grokability/snipe-it/security/advisories/GHSA-r42m-953q-6vjx x_refsource_CONFIRM
• https://github.com/grokability/snipe-it/commit/28f493d84d057895fbb93b6570e7393a2c2fa438 x_refsource_MISC

---

snipe-it

• ==< 8.4.1

NIXPKGS-2026-1721

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-47202

9.3 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

Kavita: Pre-Auth Account Takeover

• https://github.com/Kareadita/Kavita/security/advisories/GHSA-m2v3-fcjh-hm22 x_refsource_CONFIRM
• https://github.com/Kareadita/Kavita/releases/tag/v0.9.0.2 x_refsource_MISC

---

Kavita

• ==< 0.9.0.2

NIXPKGS-2026-1720

GitHub issue published 2 weeks, 4 days ago

Permalink CVE-2026-9530

1.9 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 2 weeks, 4 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 4 days ago
• @LeSuisse ignored
  3 references

  • VDB-365549 | CTI Indicators (IOB, IOC, …
  • Submit #814275 | LibreDWG Project Libre…
  • https://www.gnu.org/
  2 weeks, 4 days ago
• @LeSuisse accepted 2 weeks, 4 days ago
• @LeSuisse published on GitHub 2 weeks, 4 days ago

GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds

• VDB-365549 | GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds technical-descriptionvdb-entry
• https://github.com/LibreDWG/libredwg/issues/1248 issue-trackingexploit
• https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap… exploit
• https://github.com/LibreDWG/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be5… patch

Ignored references (3)

• VDB-365549 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• Submit #814275 | LibreDWG Project LibreDWG <= 0.14, main branch up to commit 6d6a339 (2026-04-10) Out-of-bounds Read (CWE-125) third-party-advisory
• https://www.gnu.org/ product

---

LibreDWG

• ==0.9
• ==0.10
• ==0.1
• ==0.14
• ==0.13
• ==0.4
• ==0.3
• ==0.11
• ==0.6
• ==0.7
• ==0.5
• ==0.8
• ==0.12
• ==0.2