Nixpkgs security tracker
7.1 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): Low (L)
- Integrity (I): High (H)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): Low (L)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
The Canva Mobile App for HarmonyOS before v1.15.1 did not …
The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session.
Affected products
- <1.15.1
Matching in nixpkgs
pkgs.fgqcanvas
Qt-based remote canvas application for FlightGear
-
nixos-unstable -
- nixos-unstable-small 0-unstable-2024-02-11
-
nixos-26.05 -
- nixos-26.05-small 0-unstable-2024-02-11
pkgs.goocanvas2
Canvas widget for GTK based on the the Cairo 2D library
pkgs.goocanvas3
Canvas widget for GTK based on the the Cairo 2D library
pkgs.goocanvas_1
None
-
nixos-26.05 -
- nixos-26.05-small 1.0.0
pkgs.goocanvas_2
Canvas widget for GTK based on the the Cairo 2D library
pkgs.goocanvas_3
Canvas widget for GTK based on the the Cairo 2D library
pkgs.goocanvasmm2
C++ bindings for GooCanvas
pkgs.idrisPackages.canvas
Idris FFI binding for html5 canvas 2d api
-
nixos-unstable -
- nixos-unstable-small 2017-11-09
-
nixos-26.05 -
- nixos-26.05-small 2017-11-09
pkgs.gnome2.libgnomecanvas
None
-
nixos-26.05 -
- nixos-26.05-small 2.30.3
pkgs.perlPackages.GooCanvas
None
-
nixos-26.05 -
- nixos-26.05-small 0.06
pkgs.perl5Packages.GooCanvas
None
-
nixos-26.05 -
- nixos-26.05-small 0.06
pkgs.perlPackages.GooCanvas2
Perl binding for GooCanvas2 widget using Glib::Object::Introspection
pkgs.perlPackages.WxGLCanvas
wxPerl demo helper for Wx::GLCanvas
pkgs.perl5Packages.GooCanvas2
Perl binding for GooCanvas2 widget using Glib::Object::Introspection
pkgs.perl5Packages.WxGLCanvas
wxPerl demo helper for Wx::GLCanvas
pkgs.python313Packages.ipycanvas
Expose the browser's Canvas API to IPython
pkgs.python314Packages.ipycanvas
Expose the browser's Canvas API to IPython
pkgs.haskellPackages.blank-canvas
HTML5 Canvas Graphics Library
pkgs.haskellPackages.yampa-canvas
blank-canvas frontend for Yampa
pkgs.python313Packages.rendercanvas
One canvas API, multiple backends
pkgs.python314Packages.rendercanvas
One canvas API, multiple backends
pkgs.haskellPackages.diagrams-canvas
HTML5 canvas backend for diagrams drawing EDSL
pkgs.perlPackages.GooCanvas2CairoTypes
Bridge between GooCanvas2 and Cairo types
pkgs.perl5Packages.GooCanvas2CairoTypes
Bridge between GooCanvas2 and Cairo types
pkgs.obs-studio-plugins.obs-vertical-canvas
Plugin for OBS Studio to add vertical canvas
Package maintainers
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@Pandapip1 Gavin John <gavinnjohn@gmail.com>
-
@brainrake Marton Boros <martonboros@gmail.com>
-
@flexiondotorg Martin Wimpress <martin@wimpress.org>
-
@jonhermansen Jon Hermansen <jon@jh86.org>
-
@bcdarwin Ben Darwin <bcdarwin@gmail.com>
-
@bengsparks Ben Sparks <benjamin.sparks@protonmail.com>