Nixpkgs Security Tracker

Dismissed

Permalink CVE-2026-22412

updated 2 weeks, 1 day ago by @mweinelt Activity log

Created automatic suggestion 2 weeks, 3 days ago
@mweinelt removed
2 packages
- lomiri.geonames
- vscode-extensions.leonardssh.vscord
2 weeks, 1 day ago
@mweinelt dismissed 2 weeks, 1 day ago

WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Eona eona allows PHP Local File Inclusion.This issue affects Eona: from n/a through <= 1.3.

References

https://patchstack.com/database/Wordpress/Theme/eona/vulnerability/wordpress-eo… vdb-entry

Affected products

eona

=<<= 1.3

Ignored packages (2)

pkgs.lomiri.geonames

Parse and query the geonames database dump

nixos-unstable 0.3.1
- nixpkgs-unstable 0.3.1
- nixos-unstable-small 0.3.1
nixos-25.11 0.3.1
- nixos-25.11-small 0.3.1
- nixpkgs-25.11-darwin 0.3.1

pkgs.vscode-extensions.leonardssh.vscord

Highly customizable Discord Rich Presence extension for Visual Studio Code

nixos-unstable 5.3.9
- nixpkgs-unstable 5.3.9
- nixos-unstable-small 5.3.9
nixos-25.11 5.3.8
- nixos-25.11-small 5.3.8
- nixpkgs-25.11-darwin 5.3.8

Not in nixpkgs

Suggestion detail

References

Affected products

pkgs.lomiri.geonames

pkgs.vscode-extensions.leonardssh.vscord