Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
Permalink CVE-2025-54689
8.1 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): High (H)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): High (H)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
updated 6 months, 3 weeks ago by @LeSuisse Activity log
  • Created suggestion 8 months ago
  • @LeSuisse ignored
    30 packages
    • furnace
    • xournalpp
    • journalist
    • lazyjournal
    • qjournalctl
    • tui-journal
    • journalwatch
    • annapurna-sil
    • journaldriver
    • systemd-journal2gelf
    • kdePackages.kjournald
    • perlPackages.LogJournald
    • perl538Packages.LogJournald
    • perl540Packages.LogJournald
    • python312Packages.swh-journal
    • python313Packages.swh-journal
    • python312Packages.waterfurnace
    • python313Packages.waterfurnace
    • haskellPackages.journalctl-stream
    • haskellPackages.libsystemd-journal
    • python312Packages.logging-journald
    • python313Packages.logging-journald
    • haskellPackages.logging-facade-journald
    • typstPackages.starter-journal-article_0_1_1
    • typstPackages.starter-journal-article_0_2_0
    • typstPackages.starter-journal-article_0_3_0
    • typstPackages.starter-journal-article_0_3_1
    • typstPackages.starter-journal-article_0_3_2
    • typstPackages.starter-journal-article_0_3_3
    • typstPackages.starter-journal-article_0_4_0
    6 months, 3 weeks ago
  • @LeSuisse dismissed 6 months, 3 weeks ago
WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna allows PHP Local File Inclusion. This issue affects Urna: from n/a through 2.5.7.

Affected products

urna
  • =<2.5.7
Ignored packages (30)

pkgs.furnace

Multi-system chiptune tracker compatible with DefleMask modules

  • nixos-unstable -

pkgs.xournalpp

Xournal++ is a handwriting Notetaking software with PDF annotation support

  • nixos-unstable -

pkgs.lazyjournal

TUI for journalctl, file system logs, as well as Docker and Podman containers

  • nixos-unstable -

pkgs.qjournalctl

Qt-based graphical user interface for systemd's journalctl command

  • nixos-unstable -

pkgs.tui-journal

Your journal app if you live in a terminal

  • nixos-unstable -

pkgs.journalwatch

Tool to find error messages in the systemd journal

  • nixos-unstable -

pkgs.annapurna-sil

Unicode-based font family with broad support for writing systems that use the Devanagari script

  • nixos-unstable -

pkgs.journaldriver

Log forwarder from journald to Stackdriver Logging

  • nixos-unstable -