Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
(not in Nixpkgs)
Permalink CVE-2026-15615
updated 2 days, 22 hours ago by @LeSuisse Activity log
  • Created suggestion 3 days, 13 hours ago
  • @LeSuisse dismissed (not in Nixpkgs) 2 days, 22 hours ago
SAML <Conditions> element not validated

Logto omits validation of the SAML <Conditions> element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely.

Affected products

Logto
  • =<1.37.1

Matching in nixpkgs

pkgs.logtop

Displays a real-time count of strings received from stdin

  • nixos-unstable 0.7
    • nixpkgs-unstable 0.7
    • nixos-unstable-small 0.7
  • nixos-26.05 0.7
    • nixos-26.05-small 0.7
    • nixpkgs-26.05-darwin 0.7

Package maintainers