Nixpkgs security tracker
Untriaged
Permalink
CVE-2026-89160
3.7 LOW
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): Low (L)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): Low (L)
Activity log
- Created suggestion
PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the …
PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.
References
Affected products
PCRE2
- <10.48
Matching in nixpkgs
pkgs.pcre2
Perl Compatible Regular Expressions
pkgs.jpcre2
C++ wrapper for PCRE2 Library
pkgs.ocamlPackages.pcre2
OCaml bindings to PCRE
pkgs.haskellPackages.pcre2
Regular expressions via the PCRE2 C library (included)
pkgs.luaPackages.lrexlib-pcre2
Regular expression library binding (PCRE2 flavour).
pkgs.ocamlPackages_latest.pcre2
OCaml bindings to PCRE
pkgs.haskellPackages.regex-pcre2
PCRE2 Backend for "Text.Regex" (regex-base)
pkgs.lua51Packages.lrexlib-pcre2
Regular expression library binding (PCRE2 flavour).
pkgs.lua52Packages.lrexlib-pcre2
Regular expression library binding (PCRE2 flavour).
pkgs.lua53Packages.lrexlib-pcre2
Regular expression library binding (PCRE2 flavour).
pkgs.lua54Packages.lrexlib-pcre2
Regular expression library binding (PCRE2 flavour).
pkgs.lua55Packages.lrexlib-pcre2
Regular expression library binding (PCRE2 flavour).
pkgs.luajitPackages.lrexlib-pcre2
Regular expression library binding (PCRE2 flavour).
Package maintainers
-
@wishstudio Xiangyan Sun <wishstudio@gmail.com>
-
@vbgl Vincent Laporte <Vincent.Laporte@gmail.com>