Nixpkgs Security Tracker

Dismissed

Permalink CVE-2025-69296

updated 1 month ago by @LeSuisse Activity log

Created automatic suggestion 1 month ago
@LeSuisse removed package aardvark-dns 1 month ago
@LeSuisse dismissed 1 month ago

WordPress Aardvark theme <= 4.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhostPool Aardvark aardvark allows Reflected XSS.This issue affects Aardvark: from n/a through <= 4.6.3.

References

https://patchstack.com/database/Wordpress/Theme/aardvark/vulnerability/wordpres… vdb-entry

Affected products

aardvark

=<<= 4.6.3

Ignored packages (1)

pkgs.aardvark-dns

Authoritative dns server for A/AAAA container records

nixos-unstable 1.17.0
- nixpkgs-unstable 1.17.0
- nixos-unstable-small 1.17.0
nixos-25.11 1.16.0
- nixos-25.11-small 1.16.0
- nixpkgs-25.11-darwin 1.16.0

WP theme not present in nixpkgs

Suggestion detail

References

Affected products

pkgs.aardvark-dns