NIXPKGS-2026-2503

GitHub issue published 1 week, 1 day ago

Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture

Permalink CVE-2026-85242

6.9 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week, 1 day ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week, 1 day ago
@LeSuisse published on GitHub 1 week, 1 day ago

Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture

https://github.com/Lookyloo/PlaywrightCapture/commit/b912a04f7b190807b5e14e4970… patch

PlaywrightCapture

<v1.41.2

NIXPKGS-2026-2502

GitHub issue published 1 week, 1 day ago

util-linux libmount Privilege Escalation via Failed Mount Helper

          Permalink
          
            CVE-2026-76642
          
        8.5 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): High (H)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): High (H)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              ignored
            
                28 packages
                more
wall
eject
mount
logger
umount
hexdump
libuuid
utillinux
libsmartcols
unixtools.col
unixtools.fsck
unixtools.more
unixtools.wall
unixtools.eject
unixtools.fdisk
unixtools.mount
unixtools.write
unixtools.column
unixtools.getopt
unixtools.logger
unixtools.script
unixtools.umount
unixtools.hexdump
unixtools.whereis
util-linuxMinimal
uutils-util-linux
unixtools.util-linux

          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            util-linux libmount Privilege Escalation via Failed Mount Helper
          
      GitHub Security Advisory (GHSA-m25x-3hj9-m26f)
    
    vendor-advisoryexploit
  
      Patch Commit
    
    patch
  
      Patch Commit
    
    patch
  
      Patch Commit
    
    patch
  
      https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_moun…
    
    technical-description
  
      https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_moun…
    
    technical-description
  
      https://github.com/util-linux/util-linux
    
    product
  
      VulnCheck Advisory: util-linux libmount Privilege Escalation via Failed Mount Helper
    
    third-party-advisory
  
    util-linux

            <2.41.6
          
            <2.42.3

NIXPKGS-2026-2501

GitHub issue published 1 week, 1 day ago

Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect

          Permalink
          
            CVE-2026-85180
          
        8.7 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              ignored
            
                18 packages
                gollama
ollama-cpu
nextjs-ollama-llm-ui
python313Packages.ollama
python314Packages.ollama
python313Packages.llm-ollama
python314Packages.llm-ollama
haskellPackages.ollama-haskell
gnomeExtensions.ollama-indicator
python313Packages.langchain-ollama
python314Packages.langchain-ollama
gnomeExtensions.ollama-cloud-indicator
python313Packages.llama-index-llms-ollama
python314Packages.llama-index-llms-ollama
python313Packages.llama-index-embeddings-ollama
python314Packages.llama-index-embeddings-ollama
pkgsRocm.python3Packages.llama-index-llms-ollama
pkgsRocm.python3Packages.llama-index-embeddings-ollama

          1 week, 1 day ago
          
          @LeSuisse
          
              restored
            
              package ollama-cpu
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
          
      GitHub Issue #17041
    
    issue-tracking
  
      https://github.com/ollama/ollama
    
    product
  
      x/transfer/download.go at v0.33.2
    
    technical-description
  
      VulnCheck Advisory: Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
    
    third-party-advisory
  
    ollama

            =<0.33.2

NIXPKGS-2026-2500

GitHub issue published 1 week, 1 day ago

Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass

Permalink CVE-2026-75035

7.1 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week, 1 day ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse ignored
2 packages
- terraform-providers.rancher2
- terraform-providers.rancher_rancher2
1 week, 1 day ago
@LeSuisse accepted 1 week, 1 day ago
@LeSuisse published on GitHub 1 week, 1 day ago

Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass

https://github.com/rancher/rancher/releases/tag/v2.15.1

Rancher

<2.15.1

Needs something for stable

NIXPKGS-2026-2499

GitHub issue published 1 week, 1 day ago

SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorization

          Permalink
          
            CVE-2026-85241
          
        5.3 MEDIUM
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): Low (L)
        
          Vulnerable System Impact Integrity (VI): Low (L)
        
          Vulnerable System Impact Availability (VA): Low (L)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Exploit Maturity (E): Not Defined (X)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
        
          Modified Vulnerable System Impact Integrity (MVI): Low (L)
        
          Modified Vulnerable System Impact Availability (MVA): Low (L)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              ignored
            
                6 packages
                bloodhound-py
haskellPackages.bloodhound
python313Packages.bloodhound
python314Packages.bloodhound
python313Packages.bloodhound-py
python314Packages.bloodhound-py

          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorization
          
      VDB-398471 | SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorization
    
    technical-descriptionvdb-entry
  
      VDB-398471 | CTI Indicators (IOB, IOC, TTP, IOA)
    
    permissions-requiredsignature
  
      CVE-2026-85241 | CVE Analysis and Report
    
    third-party-advisory
  
      Submit #894488 | SpecterOps BloodHound 9.4.0 Improper Authorization
    
    third-party-advisory
  
      https://github.com/SpecterOps/BloodHound/commit/39d1276a63e95a7713f954dea632a19…
    
    patch
  
      https://github.com/SpecterOps/BloodHound/releases/tag/v9.6.0-rc1
    
    patch
  
      https://github.com/SpecterOps/BloodHound/
    
    product
  
    BloodHound

            ==9.5.0
          
            ==9.6.0-rc1
          
            ==9.7.0-rc3
          
            ==9.5.1
          
            ==9.6.0
          
            ==9.0.0
          
            ==9.1.0
          
            ==9.4.0
          
            ==9.2.2

NIXPKGS-2026-2498

GitHub issue published 1 week, 1 day ago

rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

          Permalink
          
            CVE-2026-85396
          
        8.7 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): High (H)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): High (H)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix
          
      Patch Commit
    
    patch
  
      https://github.com/rubyzip/rubyzip
    
    product
  
      rubyzip v3.4.0 Release Notes
    
    release-notes
  
      https://github.com/rubyzip/rubyzip/blob/v3.3.1/lib/zip/entry.rb
    
    technical-description
  
      https://github.com/geo-chen/oss/blob/main/rubyzip.md
    
    technical-description
  
      VulnCheck Advisory: rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix
    
    third-party-advisory
  
    rubyzip

            <3.4.0
          
            ==3.4.0

NIXPKGS-2026-2497

GitHub issue published 1 week, 1 day ago

Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

Permalink CVE-2026-85458

2.1 LOW

CVSS version (CVSS): 4.0
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): Low (L)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): Low (L)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week, 1 day ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse ignored package libxpdf 1 week, 1 day ago
@LeSuisse accepted 1 week, 1 day ago
@LeSuisse published on GitHub 1 week, 1 day ago

Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

https://www.xpdfreader.com/security-bug/CVE-2026-85458.html

Xpdf

==4.06

NIXPKGS-2026-2496

GitHub issue published 1 week, 1 day ago

libmongocrypt: security issues < 1.20.3

Permalink CVE-2026-81523

2.0 LOW

CVSS version (CVSS): 4.0
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): Low (L)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): Low (L)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week, 1 day ago by @LeSuisse Activity log

Created suggestion 2 weeks ago
@LeSuisse accepted 1 week, 1 day ago
@LeSuisse published on GitHub 1 week, 1 day ago

Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt

libmongocrypt

<1.20.3

Permalink CVE-2026-84962

5.7 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Attack Requirement (AT): Present (P)
Privileges Required (PR): High (H)
User Interaction (UI): Passive (P)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): Passive (P)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week, 1 day ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week, 1 day ago
@LeSuisse published on GitHub 1 week, 1 day ago

Authenticated KMS request forgery via CRLF injection in GCP key identifier strings

https://jira.mongodb.org/browse/MONGOCRYPT-960

libmongocrypt

<1.20.2

Permalink CVE-2026-84971

7.1 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 1 week, 1 day ago by @LeSuisse Activity log

Created suggestion 1 week, 1 day ago
@LeSuisse accepted 1 week, 1 day ago
@LeSuisse published on GitHub 1 week, 1 day ago

Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path

https://jira.mongodb.org/browse/MONGOCRYPT-971

libmongocrypt

<1.20.4

NIXPKGS-2026-2495

GitHub issue published 1 week, 1 day ago

parsedmarc: security issues < 11.0.1

          Permalink
          
            CVE-2026-82521
          
        6.3 MEDIUM
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): Present (P)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): Low (L)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): Present (P)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): Low (L)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject
          
      GitHub Security Advisory (GHSA-c284-w5m6-jhjm)
    
    vendor-advisory
  
      Release Notes
    
    patchrelease-notes
  
      https://www.vulncheck.com/advisories/parsedmarc-path-traversal-via-forensic-rep…
    
    third-party-advisory
  
    parsedmarc

            <11.0.1

          Permalink
          
            CVE-2026-82520
          
        8.7 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): None (N)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): High (H)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): None (N)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): High (H)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              accepted
            
          1 week, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments
          
      GitHub Security Advisory (GHSA-43qf-f35w-2x4r)
    
    vendor-advisory
  
      Release Notes
    
    patchrelease-notes
  
      https://www.vulncheck.com/advisories/parsedmarc-zip-bomb-dos-via-compressed-ema…
    
    third-party-advisory
  
    parsedmarc

            <11.0.1

NIXPKGS-2026-2494

GitHub issue published 1 week, 1 day ago

FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

          Permalink
          
            CVE-2026-85089
          
        7.1 HIGH
      
        CVSS version (CVSS): 4.0
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Attack Requirement (AT): None (N)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Vulnerable System Impact Confidentiality (VC): High (H)
        
          Vulnerable System Impact Integrity (VI): None (N)
        
          Vulnerable System Impact Availability (VA): None (N)
        
          Subsequent System Impact Confidentiality (SC): None (N)
        
          Subsequent System Impact Integrity (SI): None (N)
        
          Subsequent System Impact Availability (SA): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Attack Requirement (MAT): None (N)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Vulnerable System Impact Confidentiality (MVC): High (H)
        
          Modified Vulnerable System Impact Integrity (MVI): None (N)
        
          Modified Vulnerable System Impact Availability (MVA): None (N)
        
          Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
        
          Modified Subsequent System Impact Integrity (MSI): Negligible (N)
        
          Modified Subsequent System Impact Availability (MSA): Negligible (N)
        
          Safety (S): Not Defined (X)
        
          Automatable (AU): Not Defined (X)
        
          Recovery (R): Not Defined (X)
        
          Value Density (V): Not Defined (X)
        
          Vulnerability Response Effort (RE): Not Defined (X)
        
          Provider Urgency (U): Not Defined (X)
        
          Confidentiality Req. (CR): Not Defined (X)
        
          Integrity Req. (IR): Not Defined (X)
        
          Availability Req. (AR): Not Defined (X)
        
          Exploit Maturity (E): Not Defined (X)
        
              updated
            
          1 week, 1 day ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 week, 1 day ago
          
          @LeSuisse
          
              ignored
            
                2 references
                
                      https://github.com/FreeRDP/FreeRDP
                    
                      VulnCheck Advisory: FreeRDP before 3.31…
                    
          1 week, 1 day ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @cizra
@DeimElias

          1 week, 1 day ago
          
              maintainer.ignore
            
          @LeSuisse
          
              accepted
            
          1 week, 1 day ago
          
          @LeSuisse
          
              published on GitHub
            
          1 week, 1 day ago
          
            FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory
          
      GitHub Security Advisory (GHSA-v649-94v2-p72q)
    
    vendor-advisoryexploit
  
      Patch Commit
    
    patch
  
      Patch Commit
    
    patch
  
      FreeRDP 3.31.0 Release Notes
    
    release-notes
  
      https://github.com/FreeRDP/FreeRDP/blob/3.30.0/libfreerdp/core/info.c#L1541
    
    technical-description
  
          Ignored references (2)
        
      https://github.com/FreeRDP/FreeRDP
    
    product
  
      VulnCheck Advisory: FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory
    
    third-party-advisory
  
    FreeRDP

            ==3.31.0
          
            <3.31.0

Nixpkgs security tracker

Published issues

Server-Side Request Forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture

util-linux libmount Privilege Escalation via Failed Mount Helper

Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect

Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass

SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorization

rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt

Authenticated KMS request forgery via CRLF injection in GCP key identifier strings

Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path

parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject

parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments

FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory