NIXPKGS-2026-0539

GitHub issue published 6 months, 2 weeks ago

Permalink CVE-2026-28785

updated 6 months, 1 week ago by @mweinelt Activity log

Created suggestion 6 months, 2 weeks ago
@mweinelt accepted 6 months, 1 week ago
@mweinelt published on GitHub 6 months, 1 week ago

Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Import

https://github.com/ghostfolio/ghostfolio/security/advisories/GHSA-m5cc-7jw5-34xp x_refsource_CONFIRM
https://github.com/ghostfolio/ghostfolio/releases/tag/2.244.0 x_refsource_MISC

ghostfolio

==< 2.244.0

NixOS Unstable fixed in https://github.com/NixOS/nixpkgs/pull/496350

NIXPKGS-2026-0558

GitHub issue published 6 months, 2 weeks ago

Permalink CVE-2025-40931

9.1 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 6 months, 1 week ago by @mweinelt Activity log

Created suggestion 6 months, 2 weeks ago
@mweinelt accepted 6 months, 1 week ago
@mweinelt published on GitHub 6 months, 1 week ago

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id

Apache-Session

=<1.94

NIXPKGS-2026-0553

GitHub issue published 6 months, 2 weeks ago

Permalink CVE-2026-29060

5.0 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 6 months, 1 week ago by @mweinelt Activity log

Created suggestion 6 months, 2 weeks ago
@mweinelt accepted 6 months, 1 week ago
@mweinelt published on GitHub 6 months, 1 week ago

Gokapi: Privilege escalation with auth token

https://github.com/Forceu/Gokapi/security/advisories/GHSA-m2hx-wjxc-9fp4 x_refsource_CONFIRM
https://github.com/Forceu/Gokapi/releases/tag/v2.2.3 x_refsource_MISC

Gokapi

==< 2.2.3

NIXPKGS-2026-0551

GitHub issue published 6 months, 2 weeks ago

Permalink CVE-2026-29061

5.4 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 6 months, 1 week ago by @mweinelt Activity log

Created suggestion 6 months, 2 weeks ago
@mweinelt accepted 6 months, 1 week ago
@mweinelt published on GitHub 6 months, 1 week ago

Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion

https://github.com/Forceu/Gokapi/security/advisories/GHSA-q658-hfpg-35qc x_refsource_CONFIRM
https://github.com/Forceu/Gokapi/releases/tag/v2.2.3 x_refsource_MISC

Gokapi

==< 2.2.3

NIXPKGS-2026-0545

GitHub issue published 6 months, 2 weeks ago

          Permalink
          
            CVE-2026-30233
          
        6.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): None (N)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): None (N)
        
              updated
            
          6 months, 1 week ago
          by @mweinelt
        
      Activity log
    
              Created suggestion
            
          6 months, 2 weeks ago
          
          @mweinelt
          
              accepted
            
          6 months, 1 week ago
          
          @mweinelt
          
              published on GitHub
            
          6 months, 1 week ago
          
            OliveTin: View permission not being checked when returning dashboards
          
      https://github.com/OliveTin/OliveTin/security/advisories/GHSA-jf73-858c-54pg
    
    x_refsource_CONFIRM
  
      https://github.com/OliveTin/OliveTin/commit/d7962710e7c46f6bdda4188b5b0cdbde4be665a0
    
    x_refsource_MISC
  
      https://github.com/OliveTin/OliveTin/releases/tag/3000.11.1
    
    x_refsource_MISC
  
    OliveTin

            ==< 3000.11.1

NIXPKGS-2026-0550

GitHub issue published 6 months, 2 weeks ago

Permalink CVE-2026-29783

updated 6 months, 1 week ago by @mweinelt Activity log

Created suggestion 6 months, 2 weeks ago
@mweinelt ignored
2 packages
- copilot-cli
- fishPlugins.github-copilot-cli-fish
6 months, 1 week ago
@mweinelt added maintainer @dbreyfogle 6 months, 1 week ago maintainer.add
@mweinelt deleted maintainer @malob 6 months, 1 week ago maintainer.delete
@mweinelt accepted 6 months, 1 week ago
@mweinelt published on GitHub 6 months, 1 week ago

GitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command execution

https://github.com/github/copilot-cli/security/advisories/GHSA-g8r9-g2v8-jv6f x_refsource_CONFIRM
https://github.com/github/copilot-cli/releases/tag/v0.0.423 x_refsource_MISC

copilot-cli

==<= 0.0.422

https://github.com/github/copilot-cli/security/advisories/GHSA-g8r9-g2v8-jv6f

NIXPKGS-2026-0560

GitHub issue published 6 months, 2 weeks ago

          Permalink
          
            CVE-2026-28223
          
        6.1 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): High (H)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): High (H)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): None (N)
        
              updated
            
          6 months, 1 week ago
          by @mweinelt
        
      Activity log
    
              Created suggestion
            
          6 months, 2 weeks ago
          
          @mweinelt
          
              ignored
            
                11 packages
                python313Packages.wagtail
python314Packages.wagtail
python312Packages.wagtail-localize
python313Packages.wagtail-localize
python314Packages.wagtail-localize
python312Packages.wagtail-factories
python313Packages.wagtail-factories
python314Packages.wagtail-factories
python312Packages.wagtail-modeladmin
python313Packages.wagtail-modeladmin
python314Packages.wagtail-modeladmin

          6 months, 1 week ago
          
          @mweinelt
          
              accepted
            
          6 months, 1 week ago
          
          @mweinelt
          
              published on GitHub
            
          6 months, 1 week ago
          
            Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interface
          
      https://github.com/wagtail/wagtail/security/advisories/GHSA-p4v8-rw59-93cq
    
    x_refsource_CONFIRM
  
      https://github.com/wagtail/wagtail/commit/1c6f2effed68f4ccad6fbd07987e03641505f863
    
    x_refsource_MISC
  
      https://github.com/wagtail/wagtail/commit/ba70244d376a7b1bd180ded03e827917ff410c19
    
    x_refsource_MISC
  
      https://github.com/wagtail/wagtail/commit/d8c5900982df8ed5938ad993aa9ff69cda50f80c
    
    x_refsource_MISC
  
      https://github.com/wagtail/wagtail/commit/ee39d39deeb7f250fe886417b24802d7e05b1143
    
    x_refsource_MISC
  
      https://github.com/wagtail/wagtail/releases/tag/v6.3.8
    
    x_refsource_MISC
  
      https://github.com/wagtail/wagtail/releases/tag/v7.0.6
    
    x_refsource_MISC
  
      https://github.com/wagtail/wagtail/releases/tag/v7.2.3
    
    x_refsource_MISC
  
      https://github.com/wagtail/wagtail/releases/tag/v7.3.1
    
    x_refsource_MISC
  
    wagtail

            ==>= 7.1rc1, < 7.2.3
          
            ==>= 6.4rc1, < 7.0.6
          
            ==>= 7.3rc1, < 7.3.1
          
            ==< 6.3.8
          
            Please update to 7.2.3.

NIXPKGS-2026-0544

GitHub issue published 6 months, 2 weeks ago

Permalink CVE-2026-29073

updated 6 months, 1 week ago by @mweinelt Activity log

Created suggestion 6 months, 2 weeks ago
@mweinelt accepted 6 months, 1 week ago
@mweinelt published on GitHub 6 months, 1 week ago

SiYuan: Direct SQL Query API accessible to Reader-level users enables unauthorized database access

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-jqwg-75qf-vmf9 x_refsource_CONFIRM

siyuan

==< 3.6.0

NIXPKGS-2026-0546

GitHub issue published 6 months, 2 weeks ago

          Permalink
          
            CVE-2026-29089
          
        8.8 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Changed (C)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Changed (C)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          6 months, 1 week ago
          by @mweinelt
        
      Activity log
    
              Created suggestion
            
          6 months, 2 weeks ago
          
          @mweinelt
          
              ignored
            
                17 packages
                timescaledb-tune
timescaledb-parallel-copy
postgresql14Packages.timescaledb
postgresql15Packages.timescaledb
postgresql16Packages.timescaledb
postgresql17Packages.timescaledb
postgresql18Packages.timescaledb
postgresqlPackages.timescaledb-apache
postgresqlPackages.timescaledb_toolkit
postgresql14Packages.timescaledb-apache
postgresql15Packages.timescaledb-apache
postgresql16Packages.timescaledb-apache
postgresql17Packages.timescaledb-apache
postgresql18Packages.timescaledb-apache
postgresql15Packages.timescaledb_toolkit
postgresql16Packages.timescaledb_toolkit
postgresql17Packages.timescaledb_toolkit

          6 months, 1 week ago
          
          @mweinelt
          
              accepted
            
          6 months, 1 week ago
          
          @mweinelt
          
              published on GitHub
            
          6 months, 1 week ago
          
            TimescaleDB uses untrusted search path during extension upgrade
          
      https://github.com/timescale/timescaledb/security/advisories/GHSA-vgp2-jj5c-828m
    
    x_refsource_CONFIRM
  
      https://github.com/timescale/timescaledb/pull/9331
    
    x_refsource_MISC
  
      https://github.com/timescale/timescaledb/commit/9a8f7f8bdeb99e6abae0786ffe526791a8628ce3
    
    x_refsource_MISC
  
      https://github.com/timescale/timescaledb/releases/tag/2.25.2
    
    x_refsource_MISC
  
    timescaledb

            ==>= 2.23.0, < 2.25.2
          
            NixOS Unstable fixed in https://github.com/NixOS/nixpkgs/pull/496218

NIXPKGS-2026-0528

GitHub issue published 6 months, 2 weeks ago

Permalink CVE-2026-26018

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 6 months, 1 week ago by @mweinelt Activity log

Created suggestion 6 months, 2 weeks ago
@mweinelt accepted 6 months, 1 week ago
@mweinelt published on GitHub 6 months, 1 week ago

CoreDNS Loop Detection Denial of Service Vulnerability

https://github.com/coredns/coredns/security/advisories/GHSA-h75p-j8xm-m278 x_refsource_CONFIRM
https://github.com/coredns/coredns/releases/tag/v1.14.2 x_refsource_MISC

coredns

==< 1.14.2

Nixpkgs security tracker

Published issues

Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Import

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id

Gokapi: Privilege escalation with auth token

Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion

OliveTin: View permission not being checked when returning dashboards

GitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command execution

Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interface

SiYuan: Direct SQL Query API accessible to Reader-level users enables unauthorized database access

TimescaleDB uses untrusted search path during extension upgrade

CoreDNS Loop Detection Denial of Service Vulnerability