Nixpkgs security tracker

Dismissed

Permalink CVE-2025-69296

updated 5 months ago by @LeSuisse Activity log

Created suggestion 5 months ago
@LeSuisse ignored package aardvark-dns 5 months ago
@LeSuisse dismissed 5 months ago

WordPress Aardvark theme <= 4.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhostPool Aardvark aardvark allows Reflected XSS.This issue affects Aardvark: from n/a through <= 4.6.3.

References

https://patchstack.com/database/Wordpress/Theme/aardvark/vulnerability/wordpres… vdb-entry

Affected products

aardvark

=<<= 4.6.3

Ignored packages (1)

pkgs.aardvark-dns

Authoritative dns server for A/AAAA container records

nixos-unstable 1.17.0
- nixpkgs-unstable 1.17.0
- nixos-unstable-small 1.17.0

WP theme not present in nixpkgs

Suggestion detail

References

Affected products

pkgs.aardvark-dns