Nixpkgs security tracker

Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2026-32555
9.3 CRITICAL
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): None (N)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): Low (L)
created 3 weeks, 2 days ago Activity log
  • Created suggestion 3 weeks, 2 days ago
WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in Boost <= 2.0.4 versions.

Affected products

boost
  • =<2.0.4

Matching in nixpkgs

pkgs.booster

Fast and secure initramfs generator

  • nixos-unstable 0.12
    • nixpkgs-unstable 0.12
    • nixos-unstable-small 0.12
  • nixos-26.05 0.12
    • nixos-26.05-small 0.12
    • nixpkgs-26.05-darwin 0.12

pkgs.xgboost

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library

pkgs.boost191

Collection of C++ libraries

  • nixos-unstable -

pkgs.catboost

High-performance library for gradient boosting on decision trees

pkgs.boost-sml

Header only state machine library with no dependencies

pkgs.mev-boost

Ethereum block-building middleware

  • nixos-unstable 1.12
    • nixpkgs-unstable 1.12
    • nixos-unstable-small 1.12
  • nixos-26.05 1.12
    • nixos-26.05-small 1.12
    • nixpkgs-26.05-darwin 1.12

pkgs.xgboostWithCuda

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library