Nixpkgs security tracker
by @mweinelt Activity log
- Created suggestion
-
@mweinelt
ignored
8 packages
- python312Packages.azure-mgmt-commerce
- python313Packages.azure-mgmt-commerce
- python314Packages.azure-mgmt-commerce
- python312Packages.mypy-boto3-marketplacecommerceanalytics
- python313Packages.mypy-boto3-marketplacecommerceanalytics
- python314Packages.mypy-boto3-marketplacecommerceanalytics
- python312Packages.types-aiobotocore-marketplacecommerceanalytics
- python313Packages.types-aiobotocore-marketplacecommerceanalytics
- @mweinelt dismissed
Craft Commerce has Stored XSS in Inventory Location Name
Craft Commerce is an ecommerce platform for Craft CMS. Prior to 5.5.3, A stored XSS vulnerability exists in the Commerce Settings - Inventory Locations page. The Name field is rendered without proper HTML escaping, allowing an attacker to execute arbitrary JavaScript. This XSS triggers when an administrator (or user with product editing permissions) creates or edits a variant product. This vulnerability is fixed in 5.5.3.
References
Affected products
- ==>= 4.0.0 < 4.10.2
- ==>= 5.0.0 < 5.5.3
Ignored packages (8)
pkgs.python312Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python313Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python314Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python312Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-25.11 boto3-marketplacecommerceanalytics-1.41.0
- nixos-25.11-small boto3-marketplacecommerceanalytics-1.41.0
- nixpkgs-25.11-darwin boto3-marketplacecommerceanalytics-1.41.0
pkgs.python313Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixpkgs-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixos-unstable-small boto3-marketplacecommerceanalytics-1.42.3
-
nixos-25.11 boto3-marketplacecommerceanalytics-1.41.0
- nixos-25.11-small boto3-marketplacecommerceanalytics-1.41.0
- nixpkgs-25.11-darwin boto3-marketplacecommerceanalytics-1.41.0
pkgs.python314Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixpkgs-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixos-unstable-small boto3-marketplacecommerceanalytics-1.42.3
pkgs.python312Packages.types-aiobotocore-marketplacecommerceanalytics
Type annotations for aiobotocore marketplacecommerceanalytics