Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
(not in Nixpkgs)
Permalink CVE-2026-66154
8.3 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Adjacent (A)
  • Attack Complexity (AC): High (H)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Adjacent (A)
  • Modified Attack Complexity (MAC): High (H)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
updated 3 weeks, 6 days ago by @LeSuisse Activity log
  • Created suggestion 4 weeks ago
  • @LeSuisse dismissed (not in Nixpkgs) 3 weeks, 6 days ago
An insufficient certificate validation in a privileged communication workflow, was …

An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.

Affected products

GMS
  • ==9.5.1 and earlier versions

Matching in nixpkgs

pkgs.gmsh

Three-dimensional finite element mesh generator

pkgs.vgmstream

Library for playback of various streamed audio formats used in video games

  • nixos-unstable 2117
    • nixpkgs-unstable 2117
    • nixos-unstable-small 2117
  • nixos-26.05 2117
    • nixos-26.05-small 2117
    • nixpkgs-26.05-darwin 2117

pkgs.x42-gmsynth

Chris Colins' General User soundfont player LV2 plugin