NIXPKGS-2026-1346

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-41174

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse ignored
  3 references

  • https://github.com/traefik/traefik/rele…
  • https://github.com/traefik/traefik/rele…
  • https://github.com/traefik/traefik/rele…
  1 month, 3 weeks ago
• @LeSuisse ignored package traefik-certs-dumper 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding

• https://github.com/traefik/traefik/security/advisories/GHSA-xhjw-95fp-8vgq x_refsource_CONFIRM
• https://github.com/traefik/traefik/commit/df00d82fc7f12e07199551832b54de6d0e55414d x_refsource_MISC

Ignored references (3)

• https://github.com/traefik/traefik/releases/tag/v2.11.43 x_refsource_MISC
• https://github.com/traefik/traefik/releases/tag/v3.6.14 x_refsource_MISC
• https://github.com/traefik/traefik/releases/tag/v3.7.0-rc.2 x_refsource_MISC

---

traefik

• ==< 2.11.43
• ==>= 3.7.0-ea.1, < 3.7.0-rc.2

No real impact in standard NixOS use case.

NIXPKGS-2026-1345

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-41263

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse ignored package traefik-certs-dumper 1 month, 3 weeks ago
• @LeSuisse ignored
  3 references

  • https://github.com/traefik/traefik/rele…
  • https://github.com/traefik/traefik/rele…
  • https://github.com/traefik/traefik/rele…
  1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Traefik: BasicAuth middleware: timing side-channel vulnerability

• https://github.com/traefik/traefik/security/advisories/GHSA-6x2q-h3cr-8j2h x_refsource_CONFIRM

Ignored references (3)

• https://github.com/traefik/traefik/releases/tag/v2.11.43 x_refsource_MISC
• https://github.com/traefik/traefik/releases/tag/v3.6.14 x_refsource_MISC
• https://github.com/traefik/traefik/releases/tag/v3.7.0-rc.2 x_refsource_MISC

---

traefik

• ==< 2.11.43
• ==>= 3.7.0-ea.1, < 3.7.0-rc.2
• ==>= 3.0.0-beta1, < 3.6.14

NIXPKGS-2026-1344

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-35051

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse ignored package traefik-certs-dumper 1 month, 3 weeks ago
• @LeSuisse ignored
  3 references

  • https://github.com/traefik/traefik/rele…
  • https://github.com/traefik/traefik/rele…
  • https://github.com/traefik/traefik/rele…
  1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth

• https://github.com/traefik/traefik/security/advisories/GHSA-6384-m2mw-rf54 x_refsource_CONFIRM

Ignored references (3)

• https://github.com/traefik/traefik/releases/tag/v2.11.43 x_refsource_MISC
• https://github.com/traefik/traefik/releases/tag/v3.6.14 x_refsource_MISC
• https://github.com/traefik/traefik/releases/tag/v3.7.0-rc.2 x_refsource_MISC

---

traefik

• ==< 2.11.43
• ==>= 3.7.0-ea.1, < 3.7.0-rc.2
• ==>= 3.0.0-beta1, < 3.6.14

NIXPKGS-2026-1343

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-40912

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse ignored package traefik-certs-dumper 1 month, 3 weeks ago
• @LeSuisse ignored
  3 references

  • https://github.com/traefik/traefik/rele…
  • https://github.com/traefik/traefik/rele…
  • https://github.com/traefik/traefik/rele…
  1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Traefik: StripPrefixRegex auth bypass via Path/RawPath desync

• https://github.com/traefik/traefik/security/advisories/GHSA-6jwx-7vp4-9847 x_refsource_CONFIRM

Ignored references (3)

• https://github.com/traefik/traefik/releases/tag/v2.11.43 x_refsource_MISC
• https://github.com/traefik/traefik/releases/tag/v3.6.14 x_refsource_MISC
• https://github.com/traefik/traefik/releases/tag/v3.7.0-rc.2 x_refsource_MISC

---

traefik

• ==< 2.11.43
• ==>= 3.7.0-ea.1, < 3.7.0-rc.2
• ==>= 3.0.0-beta1, < 3.6.14

NIXPKGS-2026-1342

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-1584

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 2 months, 2 weeks ago
• @LeSuisse ignored
  4 packages

  • guile-gnutls
  • python312Packages.python3-gnutls
  • python313Packages.python3-gnutls
  • python314Packages.python3-gnutls
  1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

• https://access.redhat.com/security/cve/CVE-2026-1584 x_refsource_REDHATvdb-entry
• RHBZ#2435258 issue-trackingx_refsource_REDHAT

---

rhcos

gnutls

NIXPKGS-2026-1341

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-33845

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse ignored
  4 packages

  • guile-gnutls
  • python312Packages.python3-gnutls
  • python313Packages.python3-gnutls
  • python314Packages.python3-gnutls
  1 month, 3 weeks ago
• @LeSuisse ignored maintainer @vcunat 1 month, 3 weeks ago maintainer.ignore
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Gnutls: gnutls: denial of service via dtls zero-length fragment

• https://access.redhat.com/security/cve/CVE-2026-33845 x_refsource_REDHATvdb-entry
• RHBZ#2450624 issue-trackingx_refsource_REDHAT

---

rhcos

gnutls

NIXPKGS-2026-1340

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2025-9820

4.0 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 5 months ago
• @LeSuisse ignored
  3 packages

  • guile-gnutls
  • python312Packages.python3-gnutls
  • python313Packages.python3-gnutls
  4 months, 2 weeks ago
• @LeSuisse ignored maintainer @vcunat 1 month, 3 weeks ago maintainer.ignore
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

• https://access.redhat.com/security/cve/CVE-2025-9820 x_refsource_REDHATvdb-entry
• RHBZ#2392528 issue-trackingx_refsource_REDHAT
• https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0f…
• https://gitlab.com/gnutls/gnutls/-/issues/1732
• https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18
• http://www.openwall.com/lists/oss-security/2025/11/20/2

---

rhcos

gnutls

NIXPKGS-2026-1339

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-3832

3.7 LOW

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse ignored
  4 packages

  • guile-gnutls
  • python312Packages.python3-gnutls
  • python313Packages.python3-gnutls
  • python314Packages.python3-gnutls
  1 month, 3 weeks ago
• @LeSuisse ignored maintainer @vcunat 1 month, 3 weeks ago maintainer.ignore
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 references

  • RHBZ#2445762
  • https://access.redhat.com/security/cve/…
  1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

• https://gitlab.com/gnutls/gnutls/-/issues/1801 exploit

Ignored references (2)

• https://access.redhat.com/security/cve/CVE-2026-3832 x_refsource_REDHATvdb-entry
• RHBZ#2445762 issue-trackingx_refsource_REDHAT

---

rhcos

gnutls

NIXPKGS-2026-1338

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-3833

6.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): None (N)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse ignored
  4 packages

  • guile-gnutls
  • python312Packages.python3-gnutls
  • python313Packages.python3-gnutls
  • python314Packages.python3-gnutls
  1 month, 3 weeks ago
• @LeSuisse ignored maintainer @vcunat 1 month, 3 weeks ago maintainer.ignore
• @LeSuisse ignored
  2 references

  • RHBZ#2445763
  • https://access.redhat.com/security/cve/…
  1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

• https://gitlab.com/gnutls/gnutls/-/issues/1803 exploit

Ignored references (2)

• https://access.redhat.com/security/cve/CVE-2026-3833 x_refsource_REDHATvdb-entry
• RHBZ#2445763 issue-trackingx_refsource_REDHAT

---

rhcos

gnutls

NIXPKGS-2026-1337

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-6538

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Stack-based Buffer Overflow in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-23.html
• GitLab Issue #21120 issue-trackingpermissions-required
• https://gitlab.com/wireshark/wireshark/-/work_items/21120 exploit

---

Wireshark

• <4.4.15
• <4.6.5