NIXPKGS-2026-2044

GitHub issue published 2 months, 2 weeks ago

Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication

          Permalink
          
            CVE-2026-13543
          
        2.9 LOW
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): High (H)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): Low (L)
        
          Vulnerable System Impact Integrity (VI): Low (L)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Exploit Maturity (E): POC (P)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): High (H)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
        
          Modified Vulnerable System Impact Integrity (MVI): Low (L)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
              updated
            
          2 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              ignored
            
                4 references
                
                      https://github.com/documenso/documenso/
                    
                      Submit #842579 | documenso v2.11.0 Auth…
                    
                      CVE-2026-13543 | CVE Analysis and Report
                    
                      VDB-374551 | CTI Indicators (IOB, IOC, …
                    
          2 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 2 weeks ago
          
            Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication
          
      VDB-374551 | Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication
    
    vdb-entry
  
      https://github.com/documenso/documenso/issues/2758
    
    issue-trackingexploit
  
      https://github.com/documenso/documenso/pull/2837
    
    patchissue-tracking
  
          Ignored references (4)
        
      VDB-374551 | CTI Indicators (IOB, IOC, IOA)
    
    permissions-requiredsignature
  
      CVE-2026-13543 | CVE Analysis and Report
    
    third-party-advisory
  
      Submit #842579 | documenso v2.11.0 Authentication Bypass
    
    third-party-advisory
  
      https://github.com/documenso/documenso/
    
    product
  
    Documenso

            ==2.6
          
            ==2.8
          
            ==2.11.0
          
            ==2.7
          
            ==2.0
          
            ==2.2
          
            ==2.10
          
            ==2.9
          
            ==2.5
          
            ==2.1
          
            ==2.3
          
            ==2.4

NIXPKGS-2026-2043

GitHub issue published 2 months, 2 weeks ago

Nmap - Integer Underflow in IPv6 Extension Header Parsing

          Permalink
          
            CVE-2026-58058
          
        6.9 MEDIUM
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): Low (L)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          2 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 references
                
                      Nmap Change Log
                    
                      VulnCheck Advisory: Nmap - Integer Unde…
                    
          2 months, 2 weeks ago
          
          @LeSuisse
          
              ignored
            
                29 packages
                asnmap
genmap
zenmap
nmapsi4
nmap-parse
nmap-formatter
python312Packages.chainmap
python313Packages.chainmap
python314Packages.chainmap
coqPackages.mathcomp-finmap
python312Packages.nmapthon2
python313Packages.nmapthon2
python314Packages.nmapthon2
rocqPackages.mathcomp-finmap
python312Packages.python-nmap
python313Packages.python-nmap
python314Packages.python-nmap
python312Packages.dragonmapper
python313Packages.dragonmapper
python313Packages.python3-nmap
python314Packages.dragonmapper
python314Packages.python3-nmap
python312Packages.deep-chainmap
python313Packages.deep-chainmap
python314Packages.deep-chainmap
python312Packages.python-libnmap
python313Packages.python-libnmap
python314Packages.python-libnmap
home-assistant-component-tests.nmap_tracker

          2 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 2 weeks ago
          
            Nmap - Integer Underflow in IPv6 Extension Header Parsing
          
      Proof of Concept
    
    third-party-advisoryexploit
  
      Fix commit (dev tree)
    
    patch
  
          Ignored references (2)
        
      Nmap Change Log
    
    release-notes
  
      VulnCheck Advisory: Nmap - Integer Underflow in IPv6 Extension Header Parsing
    
    third-party-advisory
  
    Nmap

            =<7.99

NIXPKGS-2026-2042

GitHub issue published 2 months, 2 weeks ago

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

          Permalink
          
            CVE-2026-14164
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          2 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              ignored
            
                27 packages
                libarchive-qt
haskellPackages.libarchive
kodiPackages.vfs-libarchive
perlPackages.ArchiveLibarchive
python312Packages.libarchive-c
python313Packages.libarchive-c
python314Packages.libarchive-c
perl5Packages.ArchiveLibarchive
perl538Packages.ArchiveLibarchive
perl540Packages.ArchiveLibarchive
haskellPackages.archive-libarchive
haskellPackages.libarchive-conduit
perlPackages.ArchiveLibarchivePeek
perlPackages.TestArchiveLibarchive
perl5Packages.ArchiveLibarchivePeek
perl5Packages.TestArchiveLibarchive
perl538Packages.ArchiveLibarchivePeek
perl538Packages.TestArchiveLibarchive
perl540Packages.ArchiveLibarchivePeek
perl540Packages.TestArchiveLibarchive
perlPackages.ArchiveLibarchiveExtract
perl5Packages.ArchiveLibarchiveExtract
perl538Packages.ArchiveLibarchiveExtract
perl540Packages.ArchiveLibarchiveExtract
python312Packages.extractcode-libarchive
python313Packages.extractcode-libarchive
python314Packages.extractcode-libarchive

          2 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 2 weeks ago
          
            Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
          
      RHSA-2026:30333
    
    x_refsource_REDHATvendor-advisory
  
      https://access.redhat.com/security/cve/CVE-2026-14164
    
    x_refsource_REDHATvdb-entry
  
      RHBZ#2493411
    
    x_refsource_REDHATissue-tracking
  
      https://github.com/libarchive/libarchive/issues/3069
    
    exploit
  
      https://github.com/libarchive/libarchive/pull/3071
    
    rhcos

    libarchive

    libarchive-main

            *
          
            Patch: https://github.com/libarchive/libarchive/commit/42453cf16255800726b4efedab25138639ceef20

NIXPKGS-2026-2040

GitHub issue published 2 months, 2 weeks ago

Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints

          Permalink
          
            CVE-2026-58376
          
        7.2 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): Low (L)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): Low (L)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          2 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 2 weeks ago
          
            Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints
          
      Researcher Disclosure
    
    technical-descriptionexploit
  
      Fix PR
    
    issue-tracking
  
      Fix Commit
    
    patch
  
      https://www.vulncheck.com/advisories/dolibarr-sql-injection-via-sqlfilters-para…
    
    third-party-advisory
  
    dolibarr

            ==14db36e8486ef725b0d493d97abb2950a54358d3
          
            =<23.0.3

NIXPKGS-2026-2041

GitHub issue published 2 months, 2 weeks ago

txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

          Permalink
          
            CVE-2026-58449
          
        9.3 CRITICAL
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): High (H)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): High (H)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          2 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              ignored
            
                3 packages
                python312Packages.llama-index-readers-txtai
python313Packages.llama-index-readers-txtai
pkgsRocm.python3Packages.llama-index-readers-txtai

          2 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 2 weeks ago
          
            txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter
          
      Original GitHub Issue
    
    issue-tracking
  
      Identical Report
    
    issue-tracking
  
      Fix Commit
    
    patch
  
      https://www.vulncheck.com/advisories/txtai-unauthenticated-remote-code-executio…
    
    third-party-advisory
  
    txtai

            ==11b32da720f03276199ebc5583c15fc5d1ccafd3
          
            =<9.10.0

NIXPKGS-2026-2039

GitHub issue published 2 months, 2 weeks ago

In hostapd before 2.12, a missing bounds check in AP-mode …

          Permalink
          
            CVE-2026-58374
          
        6.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Adjacent (A)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Adjacent (A)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          2 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              ignored
            
              package hostapd-mana
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          2 months, 2 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          2 months, 2 weeks ago
          
            In hostapd before 2.12, a missing bounds check in AP-mode …
          
      hostap security advisory 2026-1: Missing multi-link parsing validation in wpa_supplicant and hostapd
    
    vendor-advisory
  
      hostap security advisory 2026-1 patch directory
    
    vendor-advisorypatch
  
      Fix commit 46dd5a4 - missing link ID bounds check
    
    patch
  
      Fix commit aa9d345 - BSS bounds check for link_id
    
    patch
  
      https://www.openwall.com/lists/oss-security/2026/06/30/1
    
    hostapd

            <2.12

NIXPKGS-2026-2038

GitHub issue published 2 months, 2 weeks ago

n8n - AST Validator Bypass in Python Code Node

Permalink CVE-2026-56777

5.3 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): Low (L)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Low (L)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 2 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 2 weeks ago
@LeSuisse ignored
3 packages
- n8n-nodes-carbonejs
- n8n-nodes-evolution-api
- n8n-task-runner-launcher
2 months, 2 weeks ago
@LeSuisse accepted 2 months, 2 weeks ago
@LeSuisse published on GitHub 2 months, 2 weeks ago

n8n - AST Validator Bypass in Python Code Node

GitHub Security Advisory (GHSA-jwm3-qcfw-c5pp) vendor-advisory
VulnCheck Advisory: n8n - AST Validator Bypass in Python Code Node third-party-advisory

n8n

==2.26.2
==2.25.7
<2.25.7
<2.26.2

NIXPKGS-2026-2037

GitHub issue published 2 months, 2 weeks ago

Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection

Permalink CVE-2026-56700

9.3 CRITICAL

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 2 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 2 weeks ago
@LeSuisse ignored
21 packages
- gravit
- antigravity
- antigravity-cli
- antigravity-fhs
- stardust-xr-gravity
- kdePackages.libgravatar
- gnomeExtensions.gravatar
- haskellPackages.gravatar
- python312Packages.libgravatar
- python313Packages.libgravatar
- python314Packages.libgravatar
- python312Packages.flask-gravatar
- python313Packages.flask-gravatar
- python314Packages.flask-gravatar
- python312Packages.django-gravatar2
- python313Packages.django-gravatar2
- python314Packages.django-gravatar2
- perlPackages.MojoliciousPluginGravatar
- perl5Packages.MojoliciousPluginGravatar
- perl538Packages.MojoliciousPluginGravatar
- perl540Packages.MojoliciousPluginGravatar
2 months, 2 weeks ago
@LeSuisse accepted 2 months, 2 weeks ago
@LeSuisse published on GitHub 2 months, 2 weeks ago

Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection

GitHub Security Advisory (GHSA-vj3m-2g9h-vm4p) vendor-advisory
VulnCheck Advisory: Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection third-party-advisory

Grav

<2.0.0-beta.2
==2.0.0-beta.2

NIXPKGS-2026-2036

GitHub issue published 2 months, 2 weeks ago

Rancher: security issues < 2.14.3

Permalink CVE-2026-44946

9.5 CRITICAL

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Attack Requirement (AT): Present (P)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): High (H)
Subsequent System Impact Integrity (SI): High (H)
Subsequent System Impact Availability (SA): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): High (H)
Modified Subsequent System Impact Integrity (MSI): High (H)
Modified Subsequent System Impact Availability (MSA): High (H)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 2 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 2 weeks ago
@LeSuisse ignored
2 packages
- terraform-providers.rancher2
- terraform-providers.rancher_rancher2
2 months, 2 weeks ago
@LeSuisse accepted 2 months, 2 weeks ago
@LeSuisse published on GitHub 2 months, 2 weeks ago

SAML Authentication Replay in Rancher

https://github.com/rancher/rancher/security/advisories/GHSA-c5jm-xcmq-9j95 vendor-advisory

Rancher

<2.14.3
<2.13.7
<2.11.15
<2.12.11

Permalink CVE-2026-44947

6.9 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): High (H)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): High (H)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 2 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 2 weeks ago
@LeSuisse ignored
2 packages
- terraform-providers.rancher2
- terraform-providers.rancher_rancher2
2 months, 2 weeks ago
@LeSuisse accepted 2 months, 2 weeks ago
@LeSuisse published on GitHub 2 months, 2 weeks ago

Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

https://github.com/rancher/rancher/security/advisories/GHSA-c4rp-wgqc-mfhc vendor-advisory

Rancher

<2.13.7
<2.14.3

NIXPKGS-2026-2035

GitHub issue published 2 months, 2 weeks ago

Over-inclusive team membership expansion in GitHub App authentication provider for Rancher

Permalink CVE-2026-41053

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 2 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 2 weeks ago
@LeSuisse ignored
2 packages
- terraform-providers.rancher2
- terraform-providers.rancher_rancher2
2 months, 2 weeks ago
@LeSuisse accepted 2 months, 2 weeks ago
@LeSuisse published on GitHub 2 months, 2 weeks ago

Over-inclusive team membership expansion in GitHub App authentication provider for Rancher

https://github.com/rancher/rancher/security/advisories/GHSA-4j6x-2764-m8gh vendor-advisory

Rancher

<2.14.2
<2.13.6

Needs a backport to stable

Nixpkgs security tracker

Published issues

Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication

Nmap - Integer Underflow in IPv6 Extension Header Parsing

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints

txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

In hostapd before 2.12, a missing bounds check in AP-mode …

n8n - AST Validator Bypass in Python Code Node

Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection

SAML Authentication Replay in Rancher

Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

Over-inclusive team membership expansion in GitHub App authentication provider for Rancher