Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Dismissed
Permalink CVE-2025-54689
8.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
updated 4 months, 2 weeks ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed
    30 packages
    • furnace
    • xournalpp
    • journalist
    • lazyjournal
    • qjournalctl
    • tui-journal
    • journalwatch
    • annapurna-sil
    • journaldriver
    • systemd-journal2gelf
    • kdePackages.kjournald
    • perlPackages.LogJournald
    • perl538Packages.LogJournald
    • perl540Packages.LogJournald
    • python312Packages.swh-journal
    • python313Packages.swh-journal
    • python312Packages.waterfurnace
    • python313Packages.waterfurnace
    • haskellPackages.journalctl-stream
    • haskellPackages.libsystemd-journal
    • python312Packages.logging-journald
    • python313Packages.logging-journald
    • haskellPackages.logging-facade-journald
    • typstPackages.starter-journal-article_0_1_1
    • typstPackages.starter-journal-article_0_2_0
    • typstPackages.starter-journal-article_0_3_0
    • typstPackages.starter-journal-article_0_3_1
    • typstPackages.starter-journal-article_0_3_2
    • typstPackages.starter-journal-article_0_3_3
    • typstPackages.starter-journal-article_0_4_0
  • @LeSuisse dismissed
WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna allows PHP Local File Inclusion. This issue affects Urna: from n/a through 2.5.7.

Affected products

urna
  • =<2.5.7