Nixpkgs security tracker

Login with GitHub

Suggestions search

Untriaged
Filter by:
With package: boost191

Found 3 matching suggestions

View:
Compact
Detailed
Permalink CVE-2026-18495
6.1 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): High (H)
created 5 days, 17 hours ago Activity log
  • Created suggestion 5 days, 17 hours ago
Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough

A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.

Affected products

ceph
boost
libtiff
libtiff-main
  • *
mingw-libtiff
compat-libtiff3

Matching in nixpkgs

pkgs.booster

Fast and secure initramfs generator

  • nixos-unstable 0.12
    • nixpkgs-unstable 0.12
    • nixos-unstable-small 0.12
  • nixos-26.05 0.12
    • nixos-26.05-small 0.12
    • nixpkgs-26.05-darwin 0.12

pkgs.calceph

C library for interacting with binary planetary ephemeris files, such INPOPxx, JPL DExxx and SPICE

pkgs.libtiff

Library and utilities for working with the TIFF image file format

pkgs.xgboost

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library

pkgs.boost191

Collection of C++ libraries

  • nixos-unstable -

pkgs.catboost

High-performance library for gradient boosting on decision trees

pkgs.ceph-csi

Container Storage Interface (CSI) driver for Ceph RBD and CephFS

pkgs.boost-sml

Header only state machine library with no dependencies

pkgs.mev-boost

Ethereum block-building middleware

  • nixos-unstable 1.12
    • nixpkgs-unstable 1.12
    • nixos-unstable-small 1.12
  • nixos-26.05 1.12
    • nixos-26.05-small 1.12
    • nixpkgs-26.05-darwin 1.12

pkgs.xgboostWithCuda

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library

Package maintainers

Permalink CVE-2026-32556
7.1 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Changed (C)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): Low (L)
created 3 weeks, 2 days ago Activity log
  • Created suggestion 3 weeks, 2 days ago
WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.

Affected products

boost
  • =<2.0.4

Matching in nixpkgs

pkgs.booster

Fast and secure initramfs generator

  • nixos-unstable 0.12
    • nixpkgs-unstable 0.12
    • nixos-unstable-small 0.12
  • nixos-26.05 0.12
    • nixos-26.05-small 0.12
    • nixpkgs-26.05-darwin 0.12

pkgs.xgboost

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library

pkgs.boost191

Collection of C++ libraries

  • nixos-unstable -

pkgs.catboost

High-performance library for gradient boosting on decision trees

pkgs.boost-sml

Header only state machine library with no dependencies

pkgs.mev-boost

Ethereum block-building middleware

  • nixos-unstable 1.12
    • nixpkgs-unstable 1.12
    • nixos-unstable-small 1.12
  • nixos-26.05 1.12
    • nixos-26.05-small 1.12
    • nixpkgs-26.05-darwin 1.12

pkgs.xgboostWithCuda

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library

Permalink CVE-2026-32555
9.3 CRITICAL
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): None (N)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): Low (L)
created 3 weeks, 2 days ago Activity log
  • Created suggestion 3 weeks, 2 days ago
WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in Boost <= 2.0.4 versions.

Affected products

boost
  • =<2.0.4

Matching in nixpkgs

pkgs.booster

Fast and secure initramfs generator

  • nixos-unstable 0.12
    • nixpkgs-unstable 0.12
    • nixos-unstable-small 0.12
  • nixos-26.05 0.12
    • nixos-26.05-small 0.12
    • nixpkgs-26.05-darwin 0.12

pkgs.xgboost

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library

pkgs.boost191

Collection of C++ libraries

  • nixos-unstable -

pkgs.catboost

High-performance library for gradient boosting on decision trees

pkgs.boost-sml

Header only state machine library with no dependencies

pkgs.mev-boost

Ethereum block-building middleware

  • nixos-unstable 1.12
    • nixpkgs-unstable 1.12
    • nixos-unstable-small 1.12
  • nixos-26.05 1.12
    • nixos-26.05-small 1.12
    • nixpkgs-26.05-darwin 1.12

pkgs.xgboostWithCuda

Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library