Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-1353

NIXPKGS-2026-1353
published on
Permalink CVE-2026-40685
6.5 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): LOW
  • Availability impact (A): HIGH
updated 4 hours ago by @LeSuisse Activity log
  • Created suggestion 14 hours ago
  • @LeSuisse ignored
    4 maintainers
    • @4z3
    • @dasJ
    • @Conni2461
    • @helsinki-Jo
    4 hours ago maintainer.ignore
  • @LeSuisse accepted 4 hours ago
  • @LeSuisse published on GitHub 4 hours ago
In Exim before 4.99.2, when JSON lookup is enabled, an …

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.

Affected products

Exim
  • <4.99.2

Matching in nixpkgs

Package maintainers

Ignored maintainers (4)