Nixpkgs security tracker
NIXPKGS-2026-0604
GitHub issue
published 3 months, 2 weeks ago
by @mweinelt Activity log
- Created suggestion
-
@mweinelt
added
maintainer.add
6 maintainers
- @wegank
- @Prince213
- @OPNA2608
- @fricklerhandwerk
- @ethancedwards8
- @eljamm
- @mweinelt accepted
- @mweinelt published on GitHub
HTTP signature verification can be bypassed
Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled or disabled. This vulnerability is fixed in 2026.3.1.
References
-
https://github.com/misskey-dev/misskey/security/advisories/GHSA-grwc-c762-gcvp x_refsource_CONFIRM
Affected products
misskey
- ==< 2026.3.1
Package maintainers
-
@wegank Weijia Wang <contact@weijia.wang>
-
@feathecutie feathecutie
-
@eljamm Fedi Jamoussi <fedi.jamoussi@protonmail.ch>
-
@phanirithvij Phani Rithvij <phanirithvij2000@gmail.com>
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@ethancedwards8 Ethan Carter Edwards <ethan@ethancedwards.com>
Additional maintainers
-
@wegank Weijia Wang <contact@weijia.wang>
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>
-
@fricklerhandwerk Valentin Gagarin <valentin@fricklerhandwerk.de>
-
@ethancedwards8 Ethan Carter Edwards <ethan@ethancedwards.com>
-
@eljamm Fedi Jamoussi <fedi.jamoussi@protonmail.ch>