Nixpkgs security tracker
8.8 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
Activity log
- Created suggestion
Apioo Fusio - Remote Code Execution
A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-list bypass. The sandbox allow-list permits functions that transitively invoke system(), enabling a developer to escape the sandbox and gain OS command execution on the server. An attacker with a Developer-role account can achieve full server compromise.
References
Affected products
- =<8.8.3
Matching in nixpkgs
pkgs.datafusion-cli
CLI for Apache Arrow DataFusion
pkgs.lxgw-fusionkai
Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One
pkgs.fusionInventory
FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX
pkgs.finalfusion-utils
Utility for converting, quantizing, and querying word embeddings
pkgs.stable-diffusion-cpp
Stable Diffusion inference in pure C/C++
-
nixos-unstable -
- nixos-unstable-small 874-656a135
-
nixos-26.05 -
- nixos-26.05-small 625-f683c88
pkgs.fusioninventory-agent
FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX
pkgs.stable-diffusion-cpp-cuda
Stable Diffusion inference in pure C/C++
-
nixos-unstable -
- nixos-unstable-small 874-656a135
-
nixos-26.05 -
- nixos-26.05-small 625-f683c88
pkgs.stable-diffusion-cpp-rocm
Stable Diffusion inference in pure C/C++
-
nixos-unstable -
- nixos-unstable-small 874-656a135
-
nixos-26.05 -
- nixos-26.05-small 625-f683c88
pkgs.stable-diffusion-cpp-vulkan
Stable Diffusion inference in pure C/C++
-
nixos-unstable -
- nixos-unstable-small 874-656a135
-
nixos-26.05 -
- nixos-26.05-small 625-f683c88
pkgs.python313Packages.datafusion
Extensible query execution framework
pkgs.python313Packages.vegafusion
Core tools for using VegaFusion from Python
pkgs.python314Packages.datafusion
Extensible query execution framework
pkgs.python314Packages.vegafusion
Core tools for using VegaFusion from Python
pkgs.haskellPackages.fusion-plugin
GHC plugin to make stream fusion more predictable
pkgs.pkgsRocm.stable-diffusion-cpp
Stable Diffusion inference in pure C/C++
-
nixos-unstable -
- nixos-unstable-small 874-656a135
-
nixos-26.05 -
- nixos-26.05-small 625-f683c88
pkgs.python313Packages.finalfusion
Python module for using finalfusion, word2vec, and fastText word embeddings
pkgs.python313Packages.k-diffusion
Karras et al. (2022) diffusion models for PyTorch
-
nixos-unstable -
- nixos-unstable-small 0.1.1.post1
-
nixos-26.05 -
- nixos-26.05-small 0.1.1.post1
pkgs.python314Packages.finalfusion
Python module for using finalfusion, word2vec, and fastText word embeddings
pkgs.python314Packages.k-diffusion
Karras et al. (2022) diffusion models for PyTorch
-
nixos-unstable -
- nixos-unstable-small 0.1.1.post1
-
nixos-26.05 -
- nixos-26.05-small 0.1.1.post1
pkgs.haskellPackages.gogol-datafusion
Google Cloud Data Fusion SDK
pkgs.postgresqlPackages.pglite_fusion
PostgreSQL extension for embedding an SQLite database in a column
-
nixos-unstable -
- nixos-unstable-small 0.0.7
pkgs.haskellPackages.gogol-fusiontables
Google Fusion Tables SDK
pkgs.postgresql14Packages.pglite_fusion
PostgreSQL extension for embedding an SQLite database in a column
-
nixos-unstable -
- nixos-unstable-small 0.0.7
pkgs.postgresql15Packages.pglite_fusion
PostgreSQL extension for embedding an SQLite database in a column
-
nixos-unstable -
- nixos-unstable-small 0.0.7
pkgs.postgresql16Packages.pglite_fusion
PostgreSQL extension for embedding an SQLite database in a column
-
nixos-unstable -
- nixos-unstable-small 0.0.7
pkgs.postgresql17Packages.pglite_fusion
PostgreSQL extension for embedding an SQLite database in a column
-
nixos-unstable -
- nixos-unstable-small 0.0.7
pkgs.postgresql18Packages.pglite_fusion
PostgreSQL extension for embedding an SQLite database in a column
-
nixos-unstable -
- nixos-unstable-small 0.0.7
pkgs.postgresql19Packages.pglite_fusion
PostgreSQL extension for embedding an SQLite database in a column
-
nixos-unstable -
- nixos-unstable-small 0.0.7
pkgs.haskellPackages.fusion-plugin-types
Types for the fusion-plugin package
pkgs.pkgsRocm.python3Packages.k-diffusion
Karras et al. (2022) diffusion models for PyTorch
-
nixos-unstable -
- nixos-unstable-small 0.1.1.post1
-
nixos-26.05 -
- nixos-26.05-small 0.1.1.post1
pkgs.pkgsRocm.stable-diffusion-cpp-vulkan
Stable Diffusion inference in pure C/C++
-
nixos-unstable -
- nixos-unstable-small 874-656a135
-
nixos-26.05 -
- nixos-26.05-small 625-f683c88
pkgs.chickenPackages_5.chickenEggs.fusion-arrays
Fusion arrays.
-
nixos-unstable -
- nixos-unstable-small 1.0
Package maintainers
-
@happysalada Raphael Megzari <raphael@megzari.com>
-
@phile314 Philipp Hausmann <nix@314.ch>
-
@hellodword hellodword
-
@Mic92 Jörg Thalheim <joerg@thalheim.io>
-
@06kellyjac Jack <hello+nixpkgs@j-k.io>
-
@adrlau Adrian Gunnar Lauterer <adrian@lauterer.it>
-
@frectonz Fraol Lemecha <fraol0912@gmail.com>
-
@cpcloud Phillip Cloud
-
@wariuccio Wariuccio