Nixpkgs security tracker
NIXPKGS-2026-1265
GitHub issue
published 1 month, 4 weeks ago
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse accepted
- @LeSuisse published on GitHub
Authentication bypass for certain API calls
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the URL ends with Authentication with certain function calls. This bypass allows assigning arbitrary permission to any user existing in CodeChecker. This issue affects CodeChecker: through 6.27.3.
References
Affected products
CodeChecker
- =<6.27.3
Matching in nixpkgs
pkgs.codechecker
Analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
Package maintainers
-
@felixsinger Felix Singer <felixsinger@posteo.net>
-
@zebreus Lennart Eichhorn <lennarteichhorn+nixpkgs@gmail.com>