Nixpkgs Security Tracker

Dismissed

Permalink CVE-2026-22476

updated 2 weeks, 2 days ago by @LeSuisse Activity log

Created automatic suggestion 2 weeks, 3 days ago
@LeSuisse removed
2 packages
- sketchybar
- sketchybar-app-font
2 weeks, 2 days ago
@LeSuisse dismissed 2 weeks, 2 days ago

WordPress Etchy theme <= 1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Etchy etchy allows PHP Local File Inclusion.This issue affects Etchy: from n/a through <= 1.0.

References

https://patchstack.com/database/Wordpress/Theme/etchy/vulnerability/wordpress-e… vdb-entry

Affected products

etchy

=<<= 1.0

Ignored packages (2)

pkgs.sketchybar

Highly customizable macOS status bar replacement

nixos-unstable 2.23.0
- nixpkgs-unstable 2.23.0
- nixos-unstable-small 2.23.0
nixos-25.11 2.23.0
- nixos-25.11-small 2.23.0
- nixpkgs-25.11-darwin 2.23.0

pkgs.sketchybar-app-font

Ligature-based symbol font and a mapping function for sketchybar

nixos-unstable 2.0.53
- nixpkgs-unstable 2.0.53
- nixos-unstable-small 2.0.53
nixos-25.11 2.0.47
- nixos-25.11-small 2.0.47
- nixpkgs-25.11-darwin 2.0.47

not present in nixpkgs

Suggestion detail

References

Affected products

pkgs.sketchybar

pkgs.sketchybar-app-font