Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
Permalink CVE-2026-2435
6.3 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): Low (L)
updated 5 months, 1 week ago by @LeSuisse Activity log
  • Created suggestion 5 months, 1 week ago
  • @LeSuisse ignored
    28 packages
    • cassette
    • assetfinder
    • assetripper
    • taproot-assets
    • etlegacy-assets
    • retroarch-assets
    • go-bindata-assetfs
    • haskellPackages.cassette
    • python312Packages.webassets
    • python313Packages.webassets
    • python314Packages.webassets
    • haskellPackages.asset-bundle
    • python312Packages.flask-assets
    • python313Packages.flask-assets
    • python314Packages.flask-assets
    • haskellPackages.wai-make-assets
    • haskellPackages.gogol-cloudasset
    • python312Packages.django-js-asset
    • python313Packages.django-js-asset
    • python314Packages.django-js-asset
    • python312Packages.google-cloud-asset
    • python313Packages.google-cloud-asset
    • python314Packages.google-cloud-asset
    • haskellPackages.gogol-digitalassetlinks
    • perlPackages.MojoliciousPluginAssetPack
    • perl5Packages.MojoliciousPluginAssetPack
    • perl538Packages.MojoliciousPluginAssetPack
    • perl540Packages.MojoliciousPluginAssetPack
    5 months, 1 week ago
  • @LeSuisse dismissed 5 months, 1 week ago
ASSET-7706

Tanium addressed a SQL injection vulnerability in Asset.

References

Affected products

Asset
  • <1.32.179
  • <1.33.269
  • <1.36.108
Ignored packages (28)

pkgs.cassette

GTK4/Adwaita application that allows you to use Yandex Music service on Linux operating systems

pkgs.assetfinder

Find domains and subdomains related to a given domain

pkgs.assetripper

Tool for extracting assets from Unity serialized files and asset bundles

pkgs.taproot-assets

Daemon for the Taproot Assets protocol specification

Not present in nixpkgs