NIXPKGS-2026-2088

GitHub issue published 3 weeks ago

apache-airflow: security issues < 3.3.0

Permalink CVE-2026-49296

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 weeks ago
@LeSuisse accepted 3 weeks ago
@LeSuisse published on GitHub 3 weeks ago

Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

apache-airflow

<3.3.0

Permalink CVE-2026-48892

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 weeks ago
@LeSuisse accepted 3 weeks ago
@LeSuisse published on GitHub 3 weeks ago

Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options

apache-airflow

<3.3.0

          Permalink
          
            CVE-2026-33264
          
        9.8 CRITICAL
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          3 weeks ago
          
          @LeSuisse
          
              accepted
            
          3 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          3 weeks ago
          
            Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()
          
      https://github.com/apache/airflow/pull/66002
    
    patch
  
      https://github.com/apache/airflow/pull/68528
    
    patch
  
      https://lists.apache.org/thread/otvdw8qt2y7xy2n5nq9xby9ky4rf5ltj
    
    vendor-advisory
  
      http://www.openwall.com/lists/oss-security/2026/07/07/1
    
    apache-airflow

            <3.3.0

Permalink CVE-2026-48828

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 weeks ago
@LeSuisse accepted 3 weeks ago
@LeSuisse published on GitHub 3 weeks ago

Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key

apache-airflow

<3.3.0

          Permalink
          
            CVE-2026-48891
          
        4.3 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): None (N)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): None (N)
        
              updated
            
          3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          3 weeks ago
          
          @LeSuisse
          
              accepted
            
          3 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          3 weeks ago
          
            Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target
          
      https://github.com/apache/airflow/pull/67627
    
    patch
  
      https://www.cve.org/CVERecord?id=CVE-2026-28563
    
    related
  
      https://lists.apache.org/thread/wzc8nflg94rq6w8f5tvtlo0o3g4wjrfl
    
    vendor-advisory
  
    apache-airflow

            <3.3.0

Permalink CVE-2026-49487

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 weeks ago
@LeSuisse accepted 3 weeks ago
@LeSuisse published on GitHub 3 weeks ago

Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs

apache-airflow

<3.3.0

NIXPKGS-2026-2087

GitHub issue published 3 weeks, 1 day ago

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder

Permalink CVE-2026-14803

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 3 weeks, 1 day ago by @LeSuisse Activity log

Created suggestion 3 weeks, 1 day ago
@LeSuisse ignored
22 packages
- perlPackages.MojoliciousPluginI18N
- perlPackages.MojoliciousPluginMail
- perl5Packages.MojoliciousPluginI18N
- perl5Packages.MojoliciousPluginMail
- perlPackages.MojoliciousPluginStatus
- perlPackages.MojoliciousPluginSyslog
- perl5Packages.MojoliciousPluginStatus
- perl5Packages.MojoliciousPluginSyslog
- perlPackages.MojoliciousPluginOpenAPI
- perlPackages.MojoliciousPluginWebpack
- perl5Packages.MojoliciousPluginOpenAPI
- perl5Packages.MojoliciousPluginWebpack
- perlPackages.MojoliciousPluginGravatar
- perl5Packages.MojoliciousPluginGravatar
- perlPackages.MojoliciousPluginAssetPack
- perl5Packages.MojoliciousPluginAssetPack
- perlPackages.MojoliciousPluginRenderFile
- perl5Packages.MojoliciousPluginRenderFile
- perlPackages.MojoliciousPluginTextExceptions
- perl5Packages.MojoliciousPluginTextExceptions
- perlPackages.MojoliciousPluginTemplateToolkit
- perl5Packages.MojoliciousPluginTemplateToolkit
3 weeks, 1 day ago
@LeSuisse accepted 3 weeks, 1 day ago
@LeSuisse published on GitHub 3 weeks, 1 day ago

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder

Mojolicious

<9.47

NIXPKGS-2026-2086

GitHub issue published 3 weeks, 1 day ago

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle

Permalink CVE-2026-13705

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 3 weeks, 1 day ago by @LeSuisse Activity log

Created suggestion 3 weeks, 1 day ago
@LeSuisse ignored
10 packages
- gimagereader-qt
- imager
- usbimager
- vcdimager
- rpi-imager
- gImageReader
- gimagereader
- gImageReader-qt
- perlPackages.ImagerQRCode
- perl5Packages.ImagerQRCode
3 weeks, 1 day ago
@LeSuisse accepted 3 weeks, 1 day ago
@LeSuisse published on GitHub 3 weeks, 1 day ago

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle

Imager

<1.032

NIXPKGS-2026-2085

GitHub issue published 3 weeks, 1 day ago

Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()

          Permalink
          
            CVE-2026-58380
          
        7.3 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          3 weeks, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              ignored
            
                18 packages
                zigimports
gimpPlugins.gimp
gimpPlugins.gmic
gimp-with-plugins
gimp2Plugins.bimp
gimp2Plugins.gimp
gimp2Plugins.gmic
gimp2-with-plugins
gimp3-with-plugins
gimp2Plugins.fourier
gimp2Plugins.farbfeld
gimpPlugins.lightning
gimp2Plugins.lightning
gimp2Plugins.lqrPlugin
gimp2Plugins.texturize
gimp2Plugins.gimplensfun
gimpPlugins.resynthesizer
gimp2Plugins.waveletSharpen

          3 weeks, 1 day ago
          
          @LeSuisse
          
              accepted
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          3 weeks, 1 day ago
          
            Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()
          
      https://access.redhat.com/security/cve/CVE-2026-58380
    
    vdb-entryx_refsource_REDHAT
  
      RHBZ#2496135
    
    issue-trackingx_refsource_REDHAT
  
      https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817
    
      https://gitlab.gnome.org/GNOME/gimp/-/issues/16206
    
    gimp

    gimp:2.8/gimp

          Fixed in 3.2.4, needs some backports/patching on stable.

NIXPKGS-2026-2084

GitHub issue published 3 weeks, 1 day ago

NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

Permalink CVE-2026-58203

5.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 3 weeks, 1 day ago by @LeSuisse Activity log

Created suggestion 3 weeks, 1 day ago
@LeSuisse accepted 3 weeks, 1 day ago
@LeSuisse published on GitHub 3 weeks, 1 day ago

NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

https://github.com/pydantic/pydantic-settings/security/advisories/GHSA-4xgf-cpjx-pc3j x_refsource_CONFIRMexploit

pydantic-settings

==>= 2.12.0, < 2.14.2

NIXPKGS-2026-2083

GitHub issue published 3 weeks, 1 day ago

Gimp: gimp: denial of service via integer overflow in playstation tim loader

          Permalink
          
            CVE-2026-59089
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          3 weeks, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              ignored
            
                19 packages
                zigimports
gimpPlugins.gimp
gimpPlugins.gmic
gimp-with-plugins
gimp2Plugins.bimp
gimp2Plugins.gimp
gimp2Plugins.gmic
gimp2-with-plugins
gimp3-with-plugins
gimp2Plugins.fourier
gimp2Plugins.farbfeld
gimpPlugins.lightning
gimp2Plugins.lightning
gimp2Plugins.lqrPlugin
gimp2Plugins.texturize
gimp2Plugins.gimplensfun
gimpPlugins.resynthesizer
gimp2Plugins.waveletSharpen
gimp2

          3 weeks, 1 day ago
          
          @LeSuisse
          
              accepted
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          3 weeks, 1 day ago
          
            Gimp: gimp: denial of service via integer overflow in playstation tim loader
          
      https://access.redhat.com/security/cve/CVE-2026-59089
    
    vdb-entryx_refsource_REDHAT
  
      RHBZ#2496583
    
    issue-trackingx_refsource_REDHAT
  
      https://gitlab.gnome.org/GNOME/gimp/-/work_items/16493
    
    exploit
  
    gimp

NIXPKGS-2026-2082

GitHub issue published 3 weeks, 1 day ago

GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference

          Permalink
          
            CVE-2026-14790
          
        1.9 LOW
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Exploit Maturity (E): POC (P)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
              updated
            
          3 weeks, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              ignored
            
              package msgpack-c
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              ignored
            
                4 references
                
                      https://github.com/gpac/gpac/
                    
                      Submit #850391 | gpac v26.02.0 NULL Poi…
                    
                      CVE-2026-14790 | CVE Analysis and Report
                    
                      VDB-376379 | CTI Indicators (IOB, IOC, …
                    
          3 weeks, 1 day ago
          
          @LeSuisse
          
              ignored
            
                31 packages
                msgpack-cxx
msgpack-tools
rubyPackages.msgpack
phpExtensions.msgpack
haskellPackages.msgpack
perlPackages.MsgPackRaw
php82Extensions.msgpack
php83Extensions.msgpack
php84Extensions.msgpack
php85Extensions.msgpack
luaPackages.lua-cmsgpack
perl5Packages.MsgPackRaw
rubyPackages_3_3.msgpack
rubyPackages_3_4.msgpack
rubyPackages_4_0.msgpack
python313Packages.msgpack
python314Packages.msgpack
lua51Packages.lua-cmsgpack
lua52Packages.lua-cmsgpack
lua53Packages.lua-cmsgpack
lua54Packages.lua-cmsgpack
lua55Packages.lua-cmsgpack
python313Packages.ormsgpack
python314Packages.ormsgpack
haskellPackages.data-msgpack
python313Packages.msgpack-numpy
python314Packages.msgpack-numpy
haskellPackages.data-msgpack-types
python313Packages.u-msgpack-python
python314Packages.u-msgpack-python
chickenPackages_5.chickenEggs.msgpack

          3 weeks, 1 day ago
          
          @LeSuisse
          
              accepted
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          3 weeks, 1 day ago
          
            GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference
          
      VDB-376379 | GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference
    
    vdb-entrytechnical-description
  
      https://github.com/gpac/gpac/issues/3596
    
    issue-trackingexploit
  
      https://github.com/gpac/gpac/commit/bd1d94e70e3bef364c07c5a1d94eca5c9f56e160
    
    patch
  
          Ignored references (4)
        
      https://github.com/gpac/gpac/
    
    product
  
      Submit #850391 | gpac v26.02.0 NULL Pointer Dereference
    
    exploitthird-party-advisory
  
      CVE-2026-14790 | CVE Analysis and Report
    
    third-party-advisory
  
      VDB-376379 | CTI Indicators (IOB, IOC, IOA)
    
    signaturepermissions-required
  
    GPAC

            ==26.02.0

NIXPKGS-2026-2081

GitHub issue published 3 weeks, 1 day ago

GPAC TeXML File load_text.c txtin_probe_duration divide by zero

          Permalink
          
            CVE-2026-14801
          
        4.8 MEDIUM
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Exploit Maturity (E): Not Defined (X)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
              updated
            
          3 weeks, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              ignored
            
                4 references
                
                      https://github.com/gpac/gpac/
                    
                      Submit #850854 | GPAC GPAC 26.03-DEV-re…
                    
                      CVE-2026-14801 | CVE Analysis and Report
                    
                      VDB-376395 | CTI Indicators (IOB, IOC, …
                    
          3 weeks, 1 day ago
          
          @LeSuisse
          
              ignored
            
                33 packages
                gpac-unstable
msgpack-cxx
msgpack-c
msgpack-tools
rubyPackages.msgpack
phpExtensions.msgpack
haskellPackages.msgpack
perlPackages.MsgPackRaw
php82Extensions.msgpack
php83Extensions.msgpack
php84Extensions.msgpack
php85Extensions.msgpack
luaPackages.lua-cmsgpack
perl5Packages.MsgPackRaw
rubyPackages_3_3.msgpack
rubyPackages_3_4.msgpack
rubyPackages_4_0.msgpack
python313Packages.msgpack
python314Packages.msgpack
lua51Packages.lua-cmsgpack
lua52Packages.lua-cmsgpack
lua53Packages.lua-cmsgpack
lua54Packages.lua-cmsgpack
lua55Packages.lua-cmsgpack
python313Packages.ormsgpack
python314Packages.ormsgpack
haskellPackages.data-msgpack
python313Packages.msgpack-numpy
python314Packages.msgpack-numpy
haskellPackages.data-msgpack-types
python313Packages.u-msgpack-python
python314Packages.u-msgpack-python
chickenPackages_5.chickenEggs.msgpack

          3 weeks, 1 day ago
          
          @LeSuisse
          
              restored
            
              package gpac-unstable
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              accepted
            
          3 weeks, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          3 weeks, 1 day ago
          
            GPAC TeXML File load_text.c txtin_probe_duration divide by zero
          
      VDB-376395 | GPAC TeXML File load_text.c txtin_probe_duration divide by zero
    
    vdb-entrytechnical-description
  
      https://github.com/gpac/gpac/issues/3610
    
    issue-trackingexploit
  
      https://github.com/gpac/gpac/commit/86a5191f2e750c767253e27ed6cfd6d547afebc2
    
    patch
  
          Ignored references (4)
        
      https://github.com/gpac/gpac/
    
    product
  
      Submit #850854 | GPAC GPAC 26.03-DEV-rev342-g80071f700-master Divide By Zero
    
    third-party-advisory
  
      CVE-2026-14801 | CVE Analysis and Report
    
    third-party-advisory
  
      VDB-376395 | CTI Indicators (IOB, IOC, IOA)
    
    signaturepermissions-required
  
    GPAC

            ==26.03-DEV-rev342-g80071f700-master

NIXPKGS-2026-2080

GitHub issue published 3 weeks, 1 day ago

pnpm: security issues < 10.34.4, < 11.7.0

Permalink CVE-2026-59196

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): High (H)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): Low (L)

updated 3 weeks, 1 day ago by @LeSuisse Activity log

Created suggestion 3 weeks, 1 day ago
@LeSuisse ignored
4 packages
- pnpmBuildHook
- pnpmConfigHook
- pnpm-fixup-state-db
- pnpm-shell-completion
3 weeks, 1 day ago
@LeSuisse accepted 3 weeks, 1 day ago
@LeSuisse published on GitHub 3 weeks, 1 day ago

pnpm: hoisted install imports lockfile alias outside node_modules

https://github.com/pnpm/pnpm/security/advisories/GHSA-fr4h-3cph-29xv x_refsource_CONFIRM

pnpm

==>= 11.0.0, < 11.7.0
==< 10.34.4

Permalink CVE-2026-59195

8.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): High (H)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): Low (L)

updated 3 weeks, 1 day ago by @LeSuisse Activity log

Created suggestion 3 weeks, 1 day ago
@LeSuisse ignored
4 packages
- pnpmBuildHook
- pnpmConfigHook
- pnpm-fixup-state-db
- pnpm-shell-completion
3 weeks, 1 day ago
@LeSuisse accepted 3 weeks, 1 day ago
@LeSuisse published on GitHub 3 weeks, 1 day ago

pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config

https://github.com/pnpm/pnpm/security/advisories/GHSA-qrv3-253h-g69c x_refsource_CONFIRM

pnpm

==>= 11.0.0, < 11.8.0
==< 10.34.4

Permalink CVE-2026-59194

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): High (H)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): Low (L)

updated 3 weeks, 1 day ago by @LeSuisse Activity log

Created suggestion 3 weeks, 1 day ago
@LeSuisse ignored
4 packages
- pnpmConfigHook
- pnpmBuildHook
- pnpm-fixup-state-db
- pnpm-shell-completion
3 weeks, 1 day ago
@LeSuisse accepted 3 weeks, 1 day ago
@LeSuisse published on GitHub 3 weeks, 1 day ago

pnpm: patch-remove could delete project-selected files outside the patches directory

https://github.com/pnpm/pnpm/security/advisories/GHSA-72r4-9c5j-mj57 x_refsource_CONFIRM

pnpm

==>= 11.0.0, < 11.7.0
==< 10.34.4

NIXPKGS-2026-2079

GitHub issue published 3 weeks, 1 day ago

openvpn: CVE-2026-13122 and CVE-2026-13698 (security issues < 2.6.20)

Permalink CVE-2026-13122

5.9 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Attack Requirement (AT): Present (P)
Privileges Required (PR): Low (L)
User Interaction (UI): Passive (P)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Passive (P)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 3 weeks, 1 day ago by @LeSuisse Activity log

Created suggestion 3 weeks, 1 day ago
@LeSuisse ignored
6 packages
- openvpn3
- openvpn-auth-ldap
- namespaced-openvpn
- openvpn_learnaddress
- networkmanager-openvpn
- nagiosPlugins.check_openvpn
3 weeks, 1 day ago
@LeSuisse accepted 3 weeks, 1 day ago
@LeSuisse published on GitHub 3 weeks, 1 day ago

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows …

https://community.openvpn.net/Security%20Announcements/CVE-2026-13122 vendor-advisory

OpenVPN

=<2.6.20
=<2.7.4

Permalink CVE-2026-13698

6.0 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): None (N)
User Interaction (UI): Passive (P)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Passive (P)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 3 weeks, 1 day ago by @LeSuisse Activity log

Created suggestion 3 weeks, 1 day ago
@LeSuisse ignored
6 packages
- openvpn-auth-ldap
- openvpn3
- namespaced-openvpn
- openvpn_learnaddress
- networkmanager-openvpn
- nagiosPlugins.check_openvpn
3 weeks, 1 day ago
@LeSuisse accepted 3 weeks, 1 day ago
@LeSuisse published on GitHub 3 weeks, 1 day ago

A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 …

https://community.openvpn.net/Security%20Announcements/CVE-2026-13698 vendor-advisory

OpenVPN

=<2.5.11
=<2.6.20
=<2.7.4

Nixpkgs security tracker

Published issues

Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options

Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()

Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key

Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target

Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle

Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()

NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

Gimp: gimp: denial of service via integer overflow in playstation tim loader

GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference

GPAC TeXML File load_text.c txtin_probe_duration divide by zero

pnpm: hoisted install imports lockfile alias outside node_modules

pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config

pnpm: patch-remove could delete project-selected files outside the patches directory

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows …

A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 …