Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestion detail

Dismissed
(not in Nixpkgs)
Permalink CVE-2026-88773
9.3 CRITICAL
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): None (N)
  • Vulnerable System Impact Integrity (VI): High (H)
  • Vulnerable System Impact Availability (VA): None (N)
  • Subsequent System Impact Confidentiality (SC): High (H)
  • Subsequent System Impact Integrity (SI): High (H)
  • Subsequent System Impact Availability (SA): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): None (N)
  • Modified Vulnerable System Impact Integrity (MVI): High (H)
  • Modified Vulnerable System Impact Availability (MVA): None (N)
  • Modified Subsequent System Impact Confidentiality (MSC): High (H)
  • Modified Subsequent System Impact Integrity (MSI): High (H)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
updated 9 hours ago by @LeSuisse Activity log
  • Created suggestion 15 hours ago
  • @LeSuisse dismissed (not in Nixpkgs) 9 hours ago
HTTP Request Smuggling

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.

Affected products

ADC
  • <14.1-73.37 FIPS
  • <13.1-37.279 and NDcPP
  • <14.1-73.37
  • <13.1-64.23
Gateway
  • <14.1-73.37 FIPS
  • <13.1-64.23

Matching in nixpkgs

pkgs.adcli

Helper library and tools for Active Directory client operations

  • nixos-unstable -
  • nixos-26.05 -

pkgs.radcli

Simple RADIUS client library

  • nixos-unstable -
    • nixos-unstable-small 1.5.2
  • nixos-26.05 -
    • nixos-26.05-small 1.5.1

pkgs.shadcn

Beautifully designed components that you can copy and paste into your apps

  • nixos-unstable -
  • nixos-26.05 -
    • nixos-26.05-small 3.7.0

pkgs.tradcpp

Traditional (K&R-style) C macro preprocessor

  • nixos-unstable -
    • nixos-unstable-small 0.5.3
  • nixos-26.05 -
    • nixos-26.05-small 0.5.3

pkgs.badchars

HEX badchar generator for different programming languages

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.threadcat

Converts a Mastodon thread to Markdown, and downloads all contained media files

  • nixos-unstable -
    • nixos-unstable-small 0.1.2
  • nixos-26.05 -
    • nixos-26.05-small 0.1.2

pkgs.xmonadctl

Send commands to a running instance of xmonad

  • nixos-unstable -
  • nixos-26.05 -

pkgs.adcskiller

Python-based tool designed to automate the process of discovering and exploiting Active Directory Certificate Services (ADCS) vulnerabilities

pkgs.mcp-gateway

Universal MCP Gateway - Single-port multiplexing with Meta-MCP for ~95% context token savings

  • nixos-unstable -
    • nixos-unstable-small 3.5.1
  • nixos-26.05 -

pkgs.grpc-gateway

GRPC to JSON proxy generator plugin for Google Protocol Buffers

  • nixos-unstable -
  • nixos-26.05 -

pkgs.janus-gateway

General purpose WebRTC server

  • nixos-unstable -
    • nixos-unstable-small 1.4.1
  • nixos-26.05 -
    • nixos-26.05-small 1.4.1

pkgs.ingress2gateway

Convert Ingress resources to Gateway API resources

  • nixos-unstable -
    • nixos-unstable-small 0.5.0
  • nixos-26.05 -
    • nixos-26.05-small 0.5.0

pkgs.firezone-gateway

WireGuard tunnel server for the Firezone zero-trust access platform

  • nixos-unstable -
    • nixos-unstable-small 1.6.1
  • nixos-26.05 -

pkgs.jetbrains.gateway

Remote development for JetBrains products

  • nixos-unstable -
  • nixos-26.05 -

pkgs.prometheus-pushgateway

Allows ephemeral and batch jobs to expose metrics to Prometheus

  • nixos-unstable -
  • nixos-26.05 -

pkgs.chirpstack-gateway-mesh

Turn LoRa gateways into relays for extending the range of LoRa networks

  • nixos-unstable -
    • nixos-unstable-small 4.1.4
  • nixos-26.05 -
    • nixos-26.05-small 4.1.3

pkgs.chirpstack-gateway-bridge

Gateway Bridge abstracts Packet Forwarder protocols into Protobuf or JSON over MQTT

  • nixos-unstable -
    • nixos-unstable-small 4.1.2
  • nixos-26.05 -
    • nixos-26.05-small 4.1.1

pkgs.home-assistant-custom-components.xiaomi_gateway3

Home Assistant custom component for control Xiaomi Multimode Gateway (aka Gateway 3), Xiaomi Multimode Gateway 2, Aqara Hub E1 on default firmwares over LAN

  • nixos-unstable -
    • nixos-unstable-small 4.2.4
  • nixos-26.05 -
    • nixos-26.05-small 4.1.4

Package maintainers