Nixpkgs Security Tracker

Dismissed

Permalink CVE-2026-2435

6.3 MEDIUM

CVSS version: 3.1
Attack vector (AV):
Attack complexity (AC):
Privileges required (PR):
User interaction (UI):
Scope (S):
Confidentiality impact (C):
Integrity impact (I):
Availability impact (A):

updated 1 month ago by @LeSuisse Activity log

Created automatic suggestion 1 month ago
@LeSuisse removed
28 packages
- cassette
- assetfinder
- assetripper
- taproot-assets
- etlegacy-assets
- retroarch-assets
- go-bindata-assetfs
- haskellPackages.cassette
- python312Packages.webassets
- python313Packages.webassets
- python314Packages.webassets
- haskellPackages.asset-bundle
- python312Packages.flask-assets
- python313Packages.flask-assets
- python314Packages.flask-assets
- haskellPackages.wai-make-assets
- haskellPackages.gogol-cloudasset
- python312Packages.django-js-asset
- python313Packages.django-js-asset
- python314Packages.django-js-asset
- python312Packages.google-cloud-asset
- python313Packages.google-cloud-asset
- python314Packages.google-cloud-asset
- haskellPackages.gogol-digitalassetlinks
- perlPackages.MojoliciousPluginAssetPack
- perl5Packages.MojoliciousPluginAssetPack
- perl538Packages.MojoliciousPluginAssetPack
- perl540Packages.MojoliciousPluginAssetPack
1 month ago
@LeSuisse dismissed 1 month ago

ASSET-7706

Tanium addressed a SQL injection vulnerability in Asset.

References

TAN-2026-004

Affected products

Asset

<1.36.108
<1.32.179
<1.33.269

Ignored packages (28)

pkgs.cassette

GTK4/Adwaita application that allows you to use Yandex Music service on Linux operating systems

nixos-unstable 0.2.1.g49
- nixpkgs-unstable 0.2.1.g49
- nixos-unstable-small 0.2.1.g49
nixos-25.11 0.2.1.g49
- nixos-25.11-small 0.2.1.g49
- nixpkgs-25.11-darwin 0.2.1.g49

pkgs.assetfinder

Find domains and subdomains related to a given domain

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-25.11 0.1.1
- nixos-25.11-small 0.1.1
- nixpkgs-25.11-darwin 0.1.1

pkgs.assetripper

Tool for extracting assets from Unity serialized files and asset bundles

nixos-unstable 1.3.10
- nixpkgs-unstable 1.3.10
- nixos-unstable-small 1.3.10
nixos-25.11 1.3.0
- nixos-25.11-small 1.3.0
- nixpkgs-25.11-darwin 1.3.0

pkgs.taproot-assets

Daemon for the Taro protocol specification

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-25.11 0.7.0
- nixos-25.11-small 0.7.0
- nixpkgs-25.11-darwin 0.7.0

pkgs.etlegacy-assets

ET: Legacy assets only

nixos-unstable 2.83.2
- nixpkgs-unstable 2.83.2
- nixos-unstable-small 2.83.2
nixos-25.11 2.83.2
- nixos-25.11-small 2.83.2
- nixpkgs-25.11-darwin 2.83.2

pkgs.retroarch-assets

Assets needed for RetroArch

nixos-unstable 1.22.0-unstable-2025-12-01
- nixpkgs-unstable 1.22.0-unstable-2025-12-01
- nixos-unstable-small 1.22.0-unstable-2025-12-01
nixos-25.11 1.22.0-unstable-2025-11-10
- nixos-25.11-small 1.22.0-unstable-2025-11-10
- nixpkgs-25.11-darwin 1.22.0-unstable-2025-11-10

pkgs.go-bindata-assetfs

Serve embedded files from jteeuwen/go-bindata

nixos-unstable 2022-04-12
- nixpkgs-unstable 2022-04-12
- nixos-unstable-small 2022-04-12
nixos-25.11 2022-04-12
- nixos-25.11-small 2022-04-12
- nixpkgs-25.11-darwin 2022-04-12

pkgs.haskellPackages.cassette

Combinators to simultaneously define parsers and pretty printers

nixos-unstable 0.2.0.1
- nixpkgs-unstable 0.2.0.1
- nixos-unstable-small 0.2.0.1
nixos-25.11 0.2.0.1
- nixos-25.11-small 0.2.0.1
- nixpkgs-25.11-darwin 0.2.0.1

pkgs.python312Packages.webassets

Media asset management for Python, with glue code for various web frameworks

nixos-25.11 2.0
- nixos-25.11-small 2.0
- nixpkgs-25.11-darwin 2.0

pkgs.python313Packages.webassets

Media asset management for Python, with glue code for various web frameworks

nixos-unstable 2.0
- nixpkgs-unstable 2.0
- nixos-unstable-small 2.0
nixos-25.11 2.0
- nixos-25.11-small 2.0
- nixpkgs-25.11-darwin 2.0

pkgs.python314Packages.webassets

Media asset management for Python, with glue code for various web frameworks

nixos-unstable 2.0
- nixpkgs-unstable 2.0
- nixos-unstable-small 2.0

pkgs.haskellPackages.asset-bundle

A build-time Cabal library that bundles executables with assets

nixos-unstable 0.1.0.2
- nixpkgs-unstable 0.1.0.2
- nixos-unstable-small 0.1.0.2
nixos-25.11 0.1.0.2
- nixos-25.11-small 0.1.0.2
- nixpkgs-25.11-darwin 0.1.0.2