Nixpkgs Security Tracker

Dismissed

Permalink CVE-2026-32388

5.4 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): NONE

updated 1 week ago by @LeSuisse Activity log

Created automatic suggestion 1 week, 2 days ago
@LeSuisse removed package glbinding 1 week ago
@LeSuisse dismissed 1 week ago

WordPress GLB theme <= 1.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GLB: from n/a through <= 1.2.2.

References

https://patchstack.com/database/Wordpress/Theme/glb/vulnerability/wordpress-glb… vdb-entry

Affected products

glb

=<<= 1.2.2

Ignored packages (1)

pkgs.glbinding

C++ binding for the OpenGL API, generated using the gl.xml specification

nixos-unstable 3.5.0
- nixpkgs-unstable 3.5.0
- nixos-unstable-small 3.5.0
nixos-25.11 3.5.0
- nixos-25.11-small 3.5.0
- nixpkgs-25.11-darwin 3.5.0

WP theme not present in nixpkgs

Suggestion detail

References

Affected products

pkgs.glbinding