Nixpkgs Security Tracker

CVE-2025-58946

created 2 hours ago

WordPress Vocal theme <= 1.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Vocal vocal allows PHP Local File Inclusion.This issue affects Vocal: from n/a through <= 1.12.

Affected products

vocal

=<<= 1.12

Matching in nixpkgs

pkgs.typstPackages.unequivocal-ams_0_1_0

An AMS-style paper template to publish at conferences and journals for mathematicians

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-25.05 0.1.0
- nixos-25.05-small 0.1.0
- nixpkgs-25.05-darwin 0.1.0

pkgs.typstPackages.unequivocal-ams_0_1_1

An AMS-style paper template to publish at conferences and journals for mathematicians

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-25.05 0.1.1
- nixos-25.05-small 0.1.1
- nixpkgs-25.05-darwin 0.1.1

pkgs.typstPackages.unequivocal-ams_0_1_2

An AMS-style paper template to publish at conferences and journals for mathematicians

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2
nixos-25.05 0.1.2
- nixos-25.05-small 0.1.2
- nixpkgs-25.05-darwin 0.1.2

Package maintainers: 1

@cherrypiejam Gongqi Huang

CVE-2025-64253

created 2 hours ago

WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerability

Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-check allows Path Traversal.This issue affects Health Check & Troubleshooting: from n/a through <= 1.7.1.

Affected products

health-check

=<<= 1.7.1

Matching in nixpkgs

pkgs.health-check

Process monitoring tool

nixos-unstable 0.04.01
- nixpkgs-unstable 0.04.01
- nixos-unstable-small 0.04.01
nixos-25.05 0.04.01
- nixos-25.05-small 0.04.01
- nixpkgs-25.05-darwin 0.04.01

pkgs.grpc-health-check

Minimal, high performance, memory-friendly, safe implementation of the gRPC health checking protocol

nixos-unstable 2022-08-19
- nixpkgs-unstable 2022-08-19
- nixos-unstable-small 2022-08-19
nixos-25.05 2022-08-19
- nixos-25.05-small 2022-08-19
- nixpkgs-25.05-darwin 2022-08-19

pkgs.python312Packages.django-health-check

Pluggable app that runs a full check on the deployment

nixos-unstable 3.20.0
- nixpkgs-unstable 3.20.0
- nixos-unstable-small 3.20.0
nixos-25.05 3.18.3
- nixos-25.05-small 3.18.3
- nixpkgs-25.05-darwin 3.18.3

pkgs.python313Packages.django-health-check

Pluggable app that runs a full check on the deployment

nixos-unstable 3.20.0
- nixpkgs-unstable 3.20.0
- nixos-unstable-small 3.20.0
nixos-25.05 3.18.3
- nixos-25.05-small 3.18.3
- nixpkgs-25.05-darwin 3.18.3

pkgs.rubyPackages.github-pages-health-check

None

nixos-unstable 1.18.2
- nixpkgs-unstable 1.18.2
- nixos-unstable-small 1.18.2
nixos-25.05 1.18.2
- nixos-25.05-small 1.18.2
- nixpkgs-25.05-darwin 1.18.2

pkgs.python312Packages.grpcio-health-checking

Standard Health Checking Service for gRPC

nixos-unstable 1.76.0
- nixpkgs-unstable 1.76.0
- nixos-unstable-small 1.76.0
nixos-25.05 1.71.0
- nixos-25.05-small 1.71.0
- nixpkgs-25.05-darwin 1.71.0

pkgs.python313Packages.grpcio-health-checking

Standard Health Checking Service for gRPC

nixos-unstable 1.76.0
- nixpkgs-unstable 1.76.0
- nixos-unstable-small 1.76.0
nixos-25.05 1.71.0
- nixos-25.05-small 1.71.0
- nixpkgs-25.05-darwin 1.71.0

pkgs.rubyPackages_3_1.github-pages-health-check

None

nixos-25.05 1.18.2
- nixos-25.05-small 1.18.2
- nixpkgs-25.05-darwin 1.18.2

pkgs.rubyPackages_3_2.github-pages-health-check

None

nixos-25.05 1.18.2
- nixos-25.05-small 1.18.2
- nixpkgs-25.05-darwin 1.18.2

pkgs.rubyPackages_3_3.github-pages-health-check

None

nixos-unstable 1.18.2
- nixpkgs-unstable 1.18.2
- nixos-unstable-small 1.18.2
nixos-25.05 1.18.2
- nixos-25.05-small 1.18.2
- nixpkgs-25.05-darwin 1.18.2

pkgs.rubyPackages_3_4.github-pages-health-check

None

nixos-unstable 1.18.2
- nixpkgs-unstable 1.18.2
- nixos-unstable-small 1.18.2
nixos-25.05 1.18.2
- nixos-25.05-small 1.18.2
- nixpkgs-25.05-darwin 1.18.2

pkgs.rubyPackages_3_5.github-pages-health-check

None

nixos-unstable 1.18.2
- nixpkgs-unstable 1.18.2
- nixos-unstable-small 1.18.2

Package maintainers: 4

@flokli Florian Klink <flokli@flokli.de>
@dtzWill Will Dietz <w@wdtz.org>
@onny Jonas Heinrich <onny@project-insanity.org>
@happysalada Raphael Megzari <raphael@megzari.com>

CVE-2025-60050

created 2 hours ago

WordPress Panda theme <= 1.21 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Panda panda allows PHP Local File Inclusion.This issue affects Panda: from n/a through <= 1.21.

Affected products

panda

=<<= 1.21

Matching in nixpkgs

pkgs.redpanda-client

Redpanda client

nixos-unstable 25.3.1
- nixpkgs-unstable 25.3.1
- nixos-unstable-small 25.3.1
nixos-25.05 25.1.3
- nixos-25.05-small 25.1.3
- nixpkgs-25.05-darwin 25.1.3

pkgs.python312Packages.pandas

Powerful data structures for data analysis, time series, and statistics

nixos-unstable 2.3.1
- nixpkgs-unstable 2.3.1
- nixos-unstable-small 2.3.1
nixos-25.05 2.2.3
- nixos-25.05-small 2.2.3
- nixpkgs-25.05-darwin 2.2.3

pkgs.python313Packages.pandas

Powerful data structures for data analysis, time series, and statistics

nixos-unstable 2.3.1
- nixpkgs-unstable 2.3.1
- nixos-unstable-small 2.3.1
nixos-25.05 2.2.3
- nixos-25.05-small 2.2.3
- nixpkgs-25.05-darwin 2.2.3

pkgs.python312Packages.biopandas

Working with molecular structures in pandas DataFrames

nixos-unstable 0.5.1
- nixpkgs-unstable 0.5.1
- nixos-unstable-small 0.5.1
nixos-25.05 0.5.1
- nixos-25.05-small 0.5.1
- nixpkgs-25.05-darwin 0.5.1

pkgs.python312Packages.geopandas

Python geospatial data analysis framework

nixos-unstable 1.1.1
- nixpkgs-unstable 1.1.1
- nixos-unstable-small 1.1.1
nixos-25.05 1.0.1
- nixos-25.05-small 1.0.1
- nixpkgs-25.05-darwin 1.0.1

pkgs.python312Packages.pandantic

Module to enriche the Pydantic BaseModel class

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-25.05 1.0.1
- nixos-25.05-small 1.0.1
- nixpkgs-25.05-darwin 1.0.1

pkgs.python312Packages.pandas-ta

Technical Analysis Indicators

nixos-unstable 0.3.14
- nixpkgs-unstable 0.3.14
- nixos-unstable-small 0.3.14
nixos-25.05 0.3.14
- nixos-25.05-small 0.3.14
- nixpkgs-25.05-darwin 0.3.14

pkgs.python313Packages.biopandas

Working with molecular structures in pandas DataFrames

nixos-unstable 0.5.1
- nixpkgs-unstable 0.5.1
- nixos-unstable-small 0.5.1
nixos-25.05 0.5.1
- nixos-25.05-small 0.5.1
- nixpkgs-25.05-darwin 0.5.1

pkgs.python313Packages.geopandas

Python geospatial data analysis framework

nixos-unstable 1.1.1
- nixpkgs-unstable 1.1.1
- nixos-unstable-small 1.1.1
nixos-25.05 1.0.1
- nixos-25.05-small 1.0.1
- nixpkgs-25.05-darwin 1.0.1

pkgs.python313Packages.pandantic

Module to enriche the Pydantic BaseModel class

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-25.05 1.0.1
- nixos-25.05-small 1.0.1
- nixpkgs-25.05-darwin 1.0.1

pkgs.python313Packages.pandas-ta

Technical Analysis Indicators

nixos-unstable 0.3.14
- nixpkgs-unstable 0.3.14
- nixos-unstable-small 0.3.14
nixos-25.05 0.3.14
- nixos-25.05-small 0.3.14
- nixpkgs-25.05-darwin 0.3.14

pkgs.python312Packages.pint-pandas

Pandas support for pint

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-25.05 0.6
- nixos-25.05-small 0.6
- nixpkgs-25.05-darwin 0.6

pkgs.python313Packages.pint-pandas

Pandas support for pint

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-25.05 0.6
- nixos-25.05-small 0.6
- nixpkgs-25.05-darwin 0.6

pkgs.python312Packages.pandas-stubs

Type annotations for Pandas

nixos-unstable 2.3.2.250926
- nixpkgs-unstable 2.3.2.250926
- nixos-unstable-small 2.3.2.250926
nixos-25.05 2.2.3.250308
- nixos-25.05-small 2.2.3.250308
- nixpkgs-25.05-darwin 2.2.3.250308

pkgs.python313Packages.pandas-stubs

Type annotations for Pandas

nixos-unstable 2.3.2.250926
- nixpkgs-unstable 2.3.2.250926
- nixos-unstable-small 2.3.2.250926
nixos-25.05 2.2.3.250308
- nixos-25.05-small 2.2.3.250308
- nixpkgs-25.05-darwin 2.2.3.250308

pkgs.python312Packages.awkward-pandas

Awkward Array Pandas Extension

nixos-unstable 2023.8.0
- nixpkgs-unstable 2023.8.0
- nixos-unstable-small 2023.8.0
nixos-25.05 2023.8.0
- nixos-25.05-small 2023.8.0
- nixpkgs-25.05-darwin 2023.8.0

pkgs.python312Packages.netdata-pandas

A helper library to pull data from the netdata REST API into a pandas dataframe.

nixos-unstable 0.0.41
- nixpkgs-unstable 0.0.41
- nixos-unstable-small 0.0.41
nixos-25.05 0.0.41
- nixos-25.05-small 0.0.41
- nixpkgs-25.05-darwin 0.0.41

pkgs.python313Packages.awkward-pandas

Awkward Array Pandas Extension

nixos-unstable 2023.8.0
- nixpkgs-unstable 2023.8.0
- nixos-unstable-small 2023.8.0
nixos-25.05 2023.8.0
- nixos-25.05-small 2023.8.0
- nixpkgs-25.05-darwin 2023.8.0

pkgs.python313Packages.netdata-pandas

A helper library to pull data from the netdata REST API into a pandas dataframe.

nixos-unstable 0.0.41
- nixpkgs-unstable 0.0.41
- nixos-unstable-small 0.0.41
nixos-25.05 0.0.41
- nixos-25.05-small 0.0.41
- nixpkgs-25.05-darwin 0.0.41

pkgs.python312Packages.geoarrow-pandas

Python implementation of the GeoArrow specification

nixos-25.05 0.1.2
- nixos-25.05-small 0.1.2
- nixpkgs-25.05-darwin 0.1.2

pkgs.python313Packages.geoarrow-pandas

Python implementation of the GeoArrow specification

nixos-25.05 0.1.2
- nixos-25.05-small 0.1.2
- nixpkgs-25.05-darwin 0.1.2

pkgs.pkgsRocm.python3Packages.pandantic

Module to enriche the Pydantic BaseModel class

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1

pkgs.python312Packages.prometheus-pandas

Pandas integration for Prometheus

nixos-unstable 0.3.3
- nixpkgs-unstable 0.3.3
- nixos-unstable-small 0.3.3
nixos-25.05 0.3.3
- nixos-25.05-small 0.3.3
- nixpkgs-25.05-darwin 0.3.3

pkgs.python313Packages.prometheus-pandas

Pandas integration for Prometheus

nixos-unstable 0.3.3
- nixpkgs-unstable 0.3.3
- nixos-unstable-small 0.3.3
nixos-25.05 0.3.3
- nixos-25.05-small 0.3.3
- nixpkgs-25.05-darwin 0.3.3

pkgs.pkgsRocm.python3Packages.pandas-stubs

Type annotations for Pandas

nixos-unstable 2.3.2.250926
- nixpkgs-unstable 2.3.2.250926
- nixos-unstable-small 2.3.2.250926

Package maintainers: 19

@GaetanLepage Gaetan Lepage <gaetan@glepage.com>
@natsukium Tomoya Otabi <nixpkgs@natsukium.com>
@cpcloud Phillip Cloud
@nialov Nikolas Ovaskainen <nikolasovaskainen@gmail.com>
@autra Augustin Trancart <augustin.trancart@gmail.com>
@l0b0 Victor Engmark <victor@engmark.name>
@imincik Ivan Mincik <ivan.mincik@gmail.com>
@sikmir Nikolay Korotkiy <sikmir@disroot.org>
@nh2 Niklas Hambüchen <mail@nh2.me>
@willcohen Will Cohen
@RaitoBezarius Ryan Lahfa <ryan@lahfa.xyz>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@7c6f434c Michael Raskin <7c6f434c@mail.ru>
@malob Malo Bourgon <mbourgon@gmail.com>
@DerDennisOP Dennis <dennish@wuitz.de>
@doronbehar Doron Behar <me@doronbehar.com>
@viktornordling Viktor Nordling <antique_paler_0i@icloud.com>
@avakhrenev Alexey Vakhrenev <avakhrenev@gmail.com>
@happysalada Raphael Megzari <raphael@megzari.com>

CVE-2025-62014

created 2 hours ago

WordPress ITok theme <= 1.1.42 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme ITok itok.This issue affects ITok: from n/a through <= 1.1.42.

Affected products

itok

=<<= 1.1.42

Matching in nixpkgs

pkgs.scitokens-cpp

A C++ implementation of the SciTokens library with a C library interface

nixos-unstable 1.1.3
- nixpkgs-unstable 1.1.3
- nixos-unstable-small 1.1.3
nixos-25.05 1.1.3
- nixos-25.05-small 1.1.3
- nixpkgs-25.05-darwin 1.1.3

pkgs.python312Packages.auditok

Audio Activity Detection tool that can process online data as well as audio files

nixos-unstable 0.1.5
- nixpkgs-unstable 0.1.5
- nixos-unstable-small 0.1.5
nixos-25.05 0.1.5
- nixos-25.05-small 0.1.5
- nixpkgs-25.05-darwin 0.1.5

pkgs.python313Packages.auditok

Audio Activity Detection tool that can process online data as well as audio files

nixos-unstable 0.1.5
- nixpkgs-unstable 0.1.5
- nixos-unstable-small 0.1.5
nixos-25.05 0.1.5
- nixos-25.05-small 0.1.5
- nixpkgs-25.05-darwin 0.1.5

pkgs.python312Packages.pypitoken

Library for generating and manipulating PyPI tokens

nixos-unstable 7.1.1
- nixpkgs-unstable 7.1.1
- nixos-unstable-small 7.1.1
nixos-25.05 7.0.1
- nixos-25.05-small 7.0.1
- nixpkgs-25.05-darwin 7.0.1

pkgs.python313Packages.pypitoken

Library for generating and manipulating PyPI tokens

nixos-unstable 7.1.1
- nixpkgs-unstable 7.1.1
- nixos-unstable-small 7.1.1
nixos-25.05 7.0.1
- nixos-25.05-small 7.0.1
- nixpkgs-25.05-darwin 7.0.1

Package maintainers: 2

@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@lub-dub evey <nix@lubdub.nl>

CVE-2025-53443

created 2 hours ago

WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Smash smash allows PHP Local File Inclusion.This issue affects Smash: from n/a through <= 1.7.

Affected products

smash

=<<= 1.7

Matching in nixpkgs

pkgs.l-smash

MP4 container utilities

nixos-unstable 2.14.5
- nixpkgs-unstable 2.14.5
- nixos-unstable-small 2.14.5
nixos-25.05 2.14.5
- nixos-25.05-small 2.14.5
- nixpkgs-25.05-darwin 2.14.5

pkgs.git-smash

Smash staged changes into previous commits to support your Git workflow, pull request and feature branch maintenance

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-25.05 0.1.1
- nixos-25.05-small 0.1.1
- nixpkgs-25.05-darwin 0.1.1

Package maintainers: 1

@bcyran Bazyli Cyran <bazyli@cyran.dev>

CVE-2026-0907

created 2 hours ago

Incorrect security UI in Split View in Google Chrome prior …

Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Affected products

Chrome

<144.0.7559.59

Matching in nixpkgs

pkgs.netflix

Open Netflix in Google Chrome app mode

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-25.05 -
- nixos-25.05-small
- nixpkgs-25.05-darwin

pkgs.chromedriver

WebDriver server for running Selenium tests on Chrome

nixos-unstable 142.0.7444.175
- nixpkgs-unstable 142.0.7444.175
- nixos-unstable-small 142.0.7444.175
nixos-25.05 142.0.7444.175
- nixos-25.05-small 142.0.7444.175
- nixpkgs-25.05-darwin 142.0.7444.175

pkgs.mkchromecast

Cast macOS and Linux Audio/Video to your Google Cast and Sonos Devices

nixos-unstable 2022-10-31
- nixpkgs-unstable 2022-10-31
- nixos-unstable-small 2022-10-31
nixos-25.05 2022-10-31
- nixos-25.05-small 2022-10-31
- nixpkgs-25.05-darwin 2022-10-31

pkgs.chrome-export

Scripts to save Google Chrome's bookmarks and history as HTML bookmarks files

nixos-unstable 2.0.2
- nixpkgs-unstable 2.0.2
- nixos-unstable-small 2.0.2
nixos-25.05 2.0.2
- nixos-25.05-small 2.0.2
- nixpkgs-25.05-darwin 2.0.2

pkgs.go-chromecast

CLI for Google Chromecast, Home devices and Cast Groups

nixos-unstable 0.3.4
- nixpkgs-unstable 0.3.4
- nixos-unstable-small 0.3.4
nixos-25.05 0.3.4
- nixos-25.05-small 0.3.4
- nixpkgs-25.05-darwin 0.3.4

pkgs.google-chrome

Freeware web browser developed by Google

nixos-unstable 142.0.7444.175
- nixpkgs-unstable 142.0.7444.175
- nixos-unstable-small 142.0.7444.175
nixos-25.05 142.0.7444.175
- nixos-25.05-small 142.0.7444.175
- nixpkgs-25.05-darwin 142.0.7444.175

pkgs.chrome-token-signing

Chrome and Firefox extension for signing with your eID on the web

nixos-unstable 1.1.5
- nixpkgs-unstable 1.1.5
- nixos-unstable-small 1.1.5
nixos-25.05 1.1.5
- nixos-25.05-small 1.1.5
- nixpkgs-25.05-darwin 1.1.5

pkgs.chrome-pak-customizer

Simple batch tool to customize pak files in chrome or chromium-based browser

nixos-unstable 2.0-unstable-2021-06-24
- nixpkgs-unstable 2.0-unstable-2021-06-24
- nixos-unstable-small 2.0-unstable-2021-06-24
nixos-25.05 2.0-unstable-2021-06-24
- nixos-25.05-small 2.0-unstable-2021-06-24
- nixpkgs-25.05-darwin 2.0-unstable-2021-06-24

pkgs.curl-impersonate-chrome

Special build of curl that can impersonate Chrome & Firefox

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.0
nixos-25.05 1.2.0
- nixos-25.05-small 1.2.0
- nixpkgs-25.05-darwin 1.2.0

pkgs.undetected-chromedriver

Custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 142.0.7444.175
- nixpkgs-unstable 142.0.7444.175
- nixos-unstable-small 142.0.7444.175
nixos-25.05 142.0.7444.175
- nixos-25.05-small 142.0.7444.175
- nixpkgs-25.05-darwin 142.0.7444.175

pkgs.electron-chromedriver_33

WebDriver server for running Selenium tests on Chrome

nixos-25.05 33.4.11
- nixos-25.05-small 33.4.11
- nixpkgs-25.05-darwin 33.4.11

pkgs.electron-chromedriver_34

WebDriver server for running Selenium tests on Chrome

nixos-25.05 34.5.8
- nixos-25.05-small 34.5.8
- nixpkgs-25.05-darwin 34.5.8

pkgs.electron-chromedriver_35

WebDriver server for running Selenium tests on Chrome

nixos-25.05 35.7.5
- nixos-25.05-small 35.7.5
- nixpkgs-25.05-darwin 35.7.5

pkgs.electron-chromedriver_36

WebDriver server for running Selenium tests on Chrome

nixos-unstable 36.9.5
- nixpkgs-unstable 36.9.5
- nixos-unstable-small 36.9.5
nixos-25.05 36.9.5
- nixos-25.05-small 36.9.5
- nixpkgs-25.05-darwin 36.9.5

pkgs.electron-chromedriver_37

WebDriver server for running Selenium tests on Chrome

nixos-unstable 37.10.2
- nixpkgs-unstable 37.10.2
- nixos-unstable-small 37.10.2
nixos-25.05 37.10.2
- nixos-25.05-small 37.10.2
- nixpkgs-25.05-darwin 37.10.2

pkgs.electron-chromedriver_38

WebDriver server for running Selenium tests on Chrome

nixos-unstable 38.7.1
- nixpkgs-unstable 38.7.1
- nixos-unstable-small 38.7.1
nixos-25.05 38.7.1
- nixos-25.05-small 38.7.1
- nixpkgs-25.05-darwin 38.7.1

pkgs.electron-chromedriver_39

WebDriver server for running Selenium tests on Chrome

nixos-unstable 39.2.3
- nixpkgs-unstable 39.2.3
- nixos-unstable-small 39.2.3
nixos-25.05 39.2.3
- nixos-25.05-small 39.2.3
- nixpkgs-25.05-darwin 39.2.3

pkgs.xorg.xf86videoopenchrome

None

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-25.05 0.6.0
- nixos-25.05-small 0.6.0
- nixpkgs-25.05-darwin 0.6.0

pkgs.ocamlPackages.chrome-trace

Chrome trace event generation library

nixos-unstable 3.20.2
- nixpkgs-unstable 3.20.2
- nixos-unstable-small 3.20.2

pkgs.noto-fonts-monochrome-emoji

Monochrome emoji font

nixos-unstable 3.000
- nixpkgs-unstable 3.000
- nixos-unstable-small 3.000
nixos-25.05 3.000
- nixos-25.05-small 3.000
- nixpkgs-25.05-darwin 3.000

pkgs.python312Packages.pychromecast

Library for Python to communicate with the Google Chromecast

nixos-unstable 14.0.9
- nixpkgs-unstable 14.0.9
- nixos-unstable-small 14.0.9
nixos-25.05 14.0.7
- nixos-25.05-small 14.0.7
- nixpkgs-25.05-darwin 14.0.7

pkgs.python313Packages.pychromecast

Library for Python to communicate with the Google Chromecast

nixos-unstable 14.0.9
- nixpkgs-unstable 14.0.9
- nixos-unstable-small 14.0.9
nixos-25.05 14.0.7
- nixos-25.05-small 14.0.7
- nixpkgs-25.05-darwin 14.0.7

pkgs.python312Packages.undetected-chromedriver

Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 3.5.5
- nixpkgs-unstable 3.5.5
- nixos-unstable-small 3.5.5
nixos-25.05 3.5.5
- nixos-25.05-small 3.5.5
- nixpkgs-25.05-darwin 3.5.5

pkgs.python313Packages.undetected-chromedriver

Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 3.5.5
- nixpkgs-unstable 3.5.5
- nixos-unstable-small 3.5.5
nixos-25.05 3.5.5
- nixos-25.05-small 3.5.5
- nixpkgs-25.05-darwin 3.5.5

pkgs.grafanaPlugins.ventura-psychrometric-panel

Grafana plugin to display air conditions on a psychrometric chart

nixos-unstable 5.0.4
- nixpkgs-unstable 5.0.4
- nixos-unstable-small 5.0.4

Package maintainers: 15

@bdesham Benjamin Esham <benjamin@esham.io>
@UlyssesZh Ulysses Zhan <ulysseszhan@gmail.com>
@mmahut Marek Mahut <marek.mahut@gmail.com>
@emilylange Emily Lange <nix@emilylange.de>
@networkException networkException <nix@nwex.de>
@GGG-KILLER GGG <gggkiller2@gmail.com>
@yayayayaka Yaya <github@uwu.is>
@liam-murphy14 Liam Murphy <liam.murphy137@gmail.com>
@zi3m5f zi3m5f <k7n3o3a6f@mozmail.com>
@johnrtitor Masum Reza <masumrezarock100@gmail.com>
@Shou Benedict Aas <x+g@shou.io>
@roberth Robert Hensing <nixpkgs@roberthensing.nl>
@nicoonoclaste nicoo <nicoo@debian.org>
@abbradar Nikolay Amiantov <ab@fmap.me>
@nagisa Simonas Kazlauskas <nixpkgs@kazlauskas.me>

CVE-2025-58940

created 2 hours ago

WordPress Basil theme <= 1.3.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Basil basil allows PHP Local File Inclusion.This issue affects Basil: from n/a through <= 1.3.12.

Affected products

basil

=<<= 1.3.12

Matching in nixpkgs

pkgs.basilk

Terminal User Interface (TUI) to manage your tasks with minimal kanban logic

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-25.05 0.2.1
- nixos-25.05-small 0.2.1
- nixpkgs-25.05-darwin 0.2.1

pkgs.basiliskii

68k Macintosh emulator

nixos-unstable 2025-07-16
- nixpkgs-unstable 2025-07-16
- nixos-unstable-small 2025-07-16
nixos-25.05 2022-09-30
- nixos-25.05-small 2022-09-30
- nixpkgs-25.05-darwin 2022-09-30

pkgs.typstPackages.dmi-basilea-thesis_0_1_0

A thesis template for the dmi at the university of basel

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

pkgs.typstPackages.dmi-basilea-thesis_0_1_1

A thesis template for the dmi at the university of basel

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1

Package maintainers: 3

@quag Jonathan Wright <quaggy@gmail.com>
@thtrf thtrf <thtrf@proton.me>
@cherrypiejam Gongqi Huang

CVE-2025-66019

created 2 hours ago

pypdf manipulated LZWDecode streams can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This issue has been patched in version 6.4.0.

Affected products

pypdf

==< 6.4.0

Matching in nixpkgs

pkgs.capypdf

Fully color managed PDF generation library

nixos-unstable 0.18.0
- nixpkgs-unstable 0.18.0
- nixos-unstable-small 0.18.0
nixos-25.05 0.16.0
- nixos-25.05-small 0.16.0
- nixpkgs-25.05-darwin 0.16.0

pkgs.python312Packages.pypdf

Pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files

nixos-unstable 6.1.0
- nixpkgs-unstable 6.1.0
- nixos-unstable-small 6.3.0
nixos-25.05 5.4.0
- nixos-25.05-small 5.4.0
- nixpkgs-25.05-darwin 5.4.0

pkgs.python313Packages.pypdf

Pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files

nixos-unstable 6.1.0
- nixpkgs-unstable 6.1.0
- nixos-unstable-small 6.3.0
nixos-25.05 5.4.0
- nixos-25.05-small 5.4.0
- nixpkgs-25.05-darwin 5.4.0

pkgs.python312Packages.pypdf2

Pure-Python library built as a PDF toolkit

nixos-unstable pypdf2-3.0.1
- nixpkgs-unstable pypdf2-3.0.1
- nixos-unstable-small pypdf2-3.0.1
nixos-25.05 pypdf2-3.0.1
- nixos-25.05-small pypdf2-3.0.1
- nixpkgs-25.05-darwin pypdf2-3.0.1

pkgs.python312Packages.pypdf3

Pure-Python library built as a PDF toolkit

nixos-unstable pypdf3-1.0.6
- nixpkgs-unstable pypdf3-1.0.6
- nixos-unstable-small pypdf3-1.0.6
nixos-25.05 pypdf3-1.0.6
- nixos-25.05-small pypdf3-1.0.6
- nixpkgs-25.05-darwin pypdf3-1.0.6

pkgs.python313Packages.pypdf2

Pure-Python library built as a PDF toolkit

nixos-unstable pypdf2-3.0.1
- nixpkgs-unstable pypdf2-3.0.1
- nixos-unstable-small pypdf2-3.0.1
nixos-25.05 pypdf2-3.0.1
- nixos-25.05-small pypdf2-3.0.1
- nixpkgs-25.05-darwin pypdf2-3.0.1

pkgs.python313Packages.pypdf3

Pure-Python library built as a PDF toolkit

nixos-unstable pypdf3-1.0.6
- nixpkgs-unstable pypdf3-1.0.6
- nixos-unstable-small pypdf3-1.0.6
nixos-25.05 pypdf3-1.0.6
- nixos-25.05-small pypdf3-1.0.6
- nixpkgs-25.05-darwin pypdf3-1.0.6

pkgs.python312Packages.pypdfium2

Python bindings to PDFium

nixos-unstable pypdfium2-5.0.0
- nixpkgs-unstable pypdfium2-5.0.0
- nixos-unstable-small pypdfium2-5.1.0
nixos-25.05 pypdfium2-4.30.1
- nixos-25.05-small pypdfium2-4.30.1
- nixpkgs-25.05-darwin pypdfium2-4.30.1

pkgs.python313Packages.pypdfium2

Python bindings to PDFium

nixos-unstable pypdfium2-5.0.0
- nixpkgs-unstable pypdfium2-5.0.0
- nixos-unstable-small pypdfium2-5.1.0
nixos-25.05 pypdfium2-4.30.1
- nixos-25.05-small pypdfium2-4.30.1
- nixpkgs-25.05-darwin pypdfium2-4.30.1

Package maintainers: 5

@jtojnar Jan Tojnar <jtojnar@gmail.com>
@javaes Jan van Esdonk <jan+dev@vanesdonk.de>
@desiderius Didier J. Devroye <didier@devroye.name>
@ambroisie Bruno BELANYI <bruno.nixpkgs@belanyi.fr>
@booxter Ihar Hrachyshka <ihar.hrachyshka@gmail.com>

CVE-2025-11468

created 2 hours ago

Folding email comments of unfoldable characters doesn't preserve parenthesis

When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.

Affected products

CPython

<3.15.0

Matching in nixpkgs

pkgs.haskellPackages.cpython

Bindings for libpython

nixos-unstable 3.9.0
- nixpkgs-unstable 3.9.0
- nixos-unstable-small 3.9.0
nixos-25.05 3.9.0
- nixos-25.05-small 3.9.0
- nixpkgs-25.05-darwin 3.9.0

Package maintainers: 1

@sheepforce Phillip Seeber <phillip.seeber@googlemail.com>

CVE-2025-58947

created 2 hours ago

WordPress Athos theme <= 1.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Athos athos allows PHP Local File Inclusion.This issue affects Athos: from n/a through <= 1.9.

Affected products

athos

=<<= 1.9

Matching in nixpkgs

pkgs.python312Packages.pathos

Parallel graph management and execution in heterogeneous computing

nixos-unstable 0.3.4
- nixpkgs-unstable 0.3.4
- nixos-unstable-small 0.3.4
nixos-25.05 0.3.4
- nixos-25.05-small 0.3.4
- nixpkgs-25.05-darwin 0.3.4

pkgs.python313Packages.pathos

Parallel graph management and execution in heterogeneous computing

nixos-unstable 0.3.4
- nixpkgs-unstable 0.3.4
- nixos-unstable-small 0.3.4
nixos-25.05 0.3.4
- nixos-25.05-small 0.3.4
- nixpkgs-25.05-darwin 0.3.4

Automatically generated suggestions

Affected products

Matching in nixpkgs

pkgs.typstPackages.unequivocal-ams_0_1_0

pkgs.typstPackages.unequivocal-ams_0_1_1

pkgs.typstPackages.unequivocal-ams_0_1_2

Package maintainers: 1

Affected products

Matching in nixpkgs

pkgs.health-check

pkgs.grpc-health-check

pkgs.python312Packages.django-health-check

pkgs.python313Packages.django-health-check

pkgs.rubyPackages.github-pages-health-check

pkgs.python312Packages.grpcio-health-checking

pkgs.python313Packages.grpcio-health-checking

pkgs.rubyPackages_3_1.github-pages-health-check

pkgs.rubyPackages_3_2.github-pages-health-check

pkgs.rubyPackages_3_3.github-pages-health-check

pkgs.rubyPackages_3_4.github-pages-health-check

pkgs.rubyPackages_3_5.github-pages-health-check

Package maintainers: 4

Affected products

Matching in nixpkgs

pkgs.redpanda-client

pkgs.python312Packages.pandas

pkgs.python313Packages.pandas

pkgs.python312Packages.biopandas

pkgs.python312Packages.geopandas

pkgs.python312Packages.pandantic

pkgs.python312Packages.pandas-ta

pkgs.python313Packages.biopandas

pkgs.python313Packages.geopandas

pkgs.python313Packages.pandantic

pkgs.python313Packages.pandas-ta

pkgs.python312Packages.pint-pandas

pkgs.python313Packages.pint-pandas

pkgs.python312Packages.pandas-stubs

pkgs.python313Packages.pandas-stubs

pkgs.python312Packages.awkward-pandas

pkgs.python312Packages.netdata-pandas

pkgs.python313Packages.awkward-pandas

pkgs.python313Packages.netdata-pandas

pkgs.python312Packages.geoarrow-pandas

pkgs.python313Packages.geoarrow-pandas

pkgs.pkgsRocm.python3Packages.pandantic

pkgs.python312Packages.prometheus-pandas

pkgs.python313Packages.prometheus-pandas

pkgs.pkgsRocm.python3Packages.pandas-stubs

Package maintainers: 19

Affected products

Matching in nixpkgs

pkgs.scitokens-cpp

pkgs.python312Packages.auditok

pkgs.python313Packages.auditok

pkgs.python312Packages.pypitoken

pkgs.python313Packages.pypitoken

Package maintainers: 2

Affected products

Matching in nixpkgs

pkgs.l-smash

pkgs.git-smash

Package maintainers: 1

Affected products

Matching in nixpkgs

pkgs.netflix

pkgs.chromedriver

pkgs.mkchromecast

pkgs.chrome-export

pkgs.go-chromecast

pkgs.google-chrome

pkgs.chrome-token-signing

pkgs.chrome-pak-customizer

pkgs.curl-impersonate-chrome

pkgs.undetected-chromedriver

pkgs.electron-chromedriver_33

pkgs.electron-chromedriver_34

pkgs.electron-chromedriver_35

pkgs.electron-chromedriver_36

pkgs.electron-chromedriver_37