Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Dismissed

Permalink CVE-2026-22455

updated 2 weeks, 1 day ago by @mweinelt Activity log

Created automatic suggestion 2 weeks, 2 days ago
@mweinelt removed
3 packages
- python312Packages.sphinx-thebe
- python313Packages.sphinx-thebe
- python314Packages.sphinx-thebe
2 weeks, 1 day ago
@mweinelt dismissed 2 weeks, 1 day ago

WordPress Thebe theme <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree Thebe thebe allows Reflected XSS.This issue affects Thebe: from n/a through <= 1.3.0.

References

https://patchstack.com/database/Wordpress/Theme/thebe/vulnerability/wordpress-t… vdb-entry

Affected products

thebe

=<<= 1.3.0

Ignored packages (3)

pkgs.python312Packages.sphinx-thebe

Integrate interactive code blocks into your documentation with Thebe and Binder

nixos-25.11 0.3.1
- nixos-25.11-small 0.3.1
- nixpkgs-25.11-darwin 0.3.1

pkgs.python313Packages.sphinx-thebe

Integrate interactive code blocks into your documentation with Thebe and Binder

nixos-unstable 0.3.1
- nixpkgs-unstable 0.3.1
- nixos-unstable-small 0.3.1
nixos-25.11 0.3.1
- nixos-25.11-small 0.3.1
- nixpkgs-25.11-darwin 0.3.1

pkgs.python314Packages.sphinx-thebe

Integrate interactive code blocks into your documentation with Thebe and Binder

nixos-unstable 0.3.1
- nixpkgs-unstable 0.3.1
- nixos-unstable-small 0.3.1

Not in nixpkgs