Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2026-4404
9.4 CRITICAL
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): Low (L)
created 5 months, 4 weeks ago Activity log
  • Created suggestion 5 months, 4 weeks ago
Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.

Affected products

Harbor
  • =<2.15.0

Matching in nixpkgs

pkgs.harbor-cli

Command-line tool facilitates seamless interaction with the Harbor container registry

  • nixos-unstable -
  • nixos-26.05 -

pkgs.mediaharbor

Cross-platform Media Ripping and Browsing GUI

  • nixos-unstable -
    • nixos-unstable-small 2.1.0

Package maintainers