Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Untriaged

Permalink CVE-2026-0535

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 2 months ago

Stored XSS in Electronic Library Component Description

A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

References

Affected products

Fusion

<2606.1.21
<2606.1.22

Matching in nixpkgs

pkgs.datafusion-cli

cli for Apache Arrow DataFusion

nixos-unstable 50.3.0
- nixpkgs-unstable 50.3.0
- nixos-unstable-small 50.3.0

pkgs.lxgw-fusionkai

Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One

nixos-unstable 24.134
- nixpkgs-unstable 24.134
- nixos-unstable-small 24.134

pkgs.fusionInventory

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6

pkgs.finalfusion-utils

Utility for converting, quantizing, and querying word embeddings

nixos-unstable 0.14.1
- nixpkgs-unstable 0.14.1
- nixos-unstable-small 0.14.1

pkgs.python312Packages.datafusion

Extensible query execution framework

nixos-unstable 50.0.0
- nixpkgs-unstable 50.0.0
- nixos-unstable-small 50.0.0

pkgs.python313Packages.datafusion

Extensible query execution framework

nixos-unstable 50.0.0
- nixpkgs-unstable 50.0.0
- nixos-unstable-small 50.0.0

pkgs.haskellPackages.fusion-plugin

GHC plugin to make stream fusion more predictable

nixos-unstable 0.2.7
- nixpkgs-unstable 0.2.7
- nixos-unstable-small 0.2.7

pkgs.python312Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python312Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.python313Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python313Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.haskellPackages.gogol-datafusion

Google Cloud Data Fusion SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0

pkgs.haskellPackages.list-fusion-probe

testing list fusion for success

pkgs.haskellPackages.gogol-fusiontables

Google Fusion Tables SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0

pkgs.haskellPackages.fusion-plugin-types

Types for the fusion-plugin package

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

pkgs.pkgsRocm.python3Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.vimPlugins.nvim-treesitter-parsers.fusion

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@happysalada Raphael Megzari <raphael@megzari.com>
@phile314 Philipp Hausmann <nix@314.ch>
@hellodword hellodword
@cpcloud Phillip Cloud
@Mic92 Jörg Thalheim <joerg@thalheim.io>