Nixpkgs security tracker

Dismissed

Permalink CVE-2026-28025

updated 2 months, 2 weeks ago by @mweinelt Activity log

Created suggestion 2 months, 3 weeks ago
@mweinelt ignored package stargazer 2 months, 2 weeks ago
@mweinelt dismissed 2 months, 2 weeks ago

WordPress Stargaze theme <= 1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Stargaze stargaze allows PHP Local File Inclusion.This issue affects Stargaze: from n/a through <= 1.5.

References

https://patchstack.com/database/Wordpress/Theme/stargaze/vulnerability/wordpres… vdb-entry

Affected products

stargaze

=<<= 1.5

Ignored packages (1)

pkgs.stargazer

Fast and easy to use Gemini server

nixos-unstable 1.3.4
- nixpkgs-unstable 1.3.4
- nixos-unstable-small 1.3.4
nixos-25.11 1.3.4
- nixos-25.11-small 1.3.4
- nixpkgs-25.11-darwin 1.3.4

Not in nixpkgs

Suggestion detail

References

Affected products

pkgs.stargazer