Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
(not in Nixpkgs)
Permalink CVE-2026-15614
updated 2 days, 23 hours ago by @LeSuisse Activity log
  • Created suggestion 3 days, 14 hours ago
  • @LeSuisse dismissed (not in Nixpkgs) 2 days, 23 hours ago
IdP-initiated SAML sessions not reliably invalidated (replay)

Logto silently fails to delete IdP-initiated SAML sessions, enabling session replay and reuse within the session’s validity window.

Affected products

Logto
  • =<1.37.1

Matching in nixpkgs

pkgs.logtop

Displays a real-time count of strings received from stdin

  • nixos-unstable 0.7
    • nixpkgs-unstable 0.7
    • nixos-unstable-small 0.7
  • nixos-26.05 0.7
    • nixos-26.05-small 0.7
    • nixpkgs-26.05-darwin 0.7

Package maintainers