Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-13240

updated 2 weeks, 2 days ago by @LeSuisse Activity log

Created suggestion 2 weeks, 3 days ago
@LeSuisse dismissed (not in Nixpkgs) 2 weeks, 2 days ago

Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0.

References

https://www.drupal.org/sa-contrib-2026-060

Affected products

Paragraphs

<1.21.0

Matching in nixpkgs

pkgs.python313Packages.paragraphs

Module to incorporate long strings

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-26.05 1.0.1
- nixos-26.05-small 1.0.1
- nixpkgs-26.05-darwin 1.0.1

pkgs.python314Packages.paragraphs

Module to incorporate long strings

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-26.05 1.0.1
- nixos-26.05-small 1.0.1
- nixpkgs-26.05-darwin 1.0.1

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>