Nixpkgs security tracker

Dismissed

Permalink CVE-2025-52661

2.4 LOW

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): LOW
Availability impact (A): NONE

updated 2 months, 3 weeks ago by @mweinelt Activity log

Created automatic suggestion 2 months, 3 weeks ago
@mweinelt dismissed 2 months, 3 weeks ago

HCL AION version 2 is affected by a JWT Token …

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised.

References

Affected products

AION

Matching in nixpkgs

pkgs.python312Packages.aionut

Asyncio Network UPS Tools

nixos-unstable 4.3.4
- nixpkgs-unstable 4.3.4
- nixos-unstable-small 4.3.4

pkgs.python313Packages.aionut

Asyncio Network UPS Tools

nixos-unstable 4.3.4
- nixpkgs-unstable 4.3.4
- nixos-unstable-small 4.3.4

pkgs.python312Packages.aiontfy

Async ntfy client library

nixos-unstable 0.6.1
- nixpkgs-unstable 0.6.1
- nixos-unstable-small 0.6.1

pkgs.python313Packages.aiontfy

Async ntfy client library

nixos-unstable 0.6.1
- nixpkgs-unstable 0.6.1
- nixos-unstable-small 0.6.1

pkgs.python312Packages.aionotion

Python library for Notion Home Monitoring

nixos-unstable 2025.02.0
- nixpkgs-unstable 2025.02.0
- nixos-unstable-small 2025.02.0

pkgs.python313Packages.aionotion

Python library for Notion Home Monitoring

nixos-unstable 2025.02.0
- nixpkgs-unstable 2025.02.0
- nixos-unstable-small 2025.02.0

pkgs.python312Packages.aionanoleaf

Python wrapper for the Nanoleaf API

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1

pkgs.python313Packages.aionanoleaf