Nixpkgs Security Tracker

Dismissed

Permalink CVE-2026-28041

updated 2 weeks, 1 day ago by @mweinelt Activity log

Created automatic suggestion 2 weeks, 3 days ago
@mweinelt removed
3 packages
- restic-integrity
- integrity-scrub
- grit
2 weeks, 1 day ago
@mweinelt dismissed 2 weeks, 1 day ago

WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Grit grit allows PHP Local File Inclusion.This issue affects Grit: from n/a through <= 1.0.1.

References

https://patchstack.com/database/Wordpress/Theme/grit/vulnerability/wordpress-gr… vdb-entry

Affected products

grit

=<<= 1.0.1

Ignored packages (3)

pkgs.grit

Multitree-based personal task manager

nixos-unstable 0.3.0
- nixpkgs-unstable 0.3.0
- nixos-unstable-small 0.3.0
nixos-25.11 0.3.0
- nixos-25.11-small 0.3.0
- nixpkgs-25.11-darwin 0.3.0

pkgs.integrity-scrub

Scrub dm-integrity devices

nixos-unstable 0.6.6
- nixpkgs-unstable 0.6.6
- nixos-unstable-small 0.6.6
nixos-25.11 0.6.6
- nixos-25.11-small 0.6.6
- nixpkgs-25.11-darwin 0.6.6

pkgs.restic-integrity

CLI tool to check the integrity of a restic repository without unlocking it

nixos-unstable 1.4.0
- nixpkgs-unstable 1.4.0
- nixos-unstable-small 1.4.0
nixos-25.11 1.4.0
- nixos-25.11-small 1.4.0
- nixpkgs-25.11-darwin 1.4.0

Not in nixpkgs

Suggestion detail

References

Affected products

pkgs.grit

pkgs.integrity-scrub

pkgs.restic-integrity