Suggestions search

All statuses

Filter by:

With package: coqPackages.TypedExtraction

Found 3 matching suggestions

View:

Compact

Detailed

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-14903

7.7 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 6 days, 17 hours ago by @LeSuisse Activity log

Created suggestion 1 week ago
@LeSuisse dismissed (not in Nixpkgs) 6 days, 17 hours ago

Path traversal in Ivanti Xtraction before version 2026.2.1 allows a …

Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14…

Affected products

Xtraction

==2026.2.1

Matching in nixpkgs

pkgs.coqPackages.TypedExtraction

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

pkgs.coqPackages.CakeMLExtraction

CakeML backend for Peregrine

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-26.05 0.1.0
- nixos-26.05-small 0.1.0
- nixpkgs-26.05-darwin 0.1.0

pkgs.coqPackages.TypedExtraction-elm

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

pkgs.coqPackages.verified-extraction

Verified Extraction from Rocq to OCaml. Including a bootstrapped extraction plugin

nixos-unstable 1.0.0-9.1
- nixpkgs-unstable 1.0.0-9.1
- nixos-unstable-small 1.0.0-9.1
nixos-26.05 1.0.0-9.1
- nixos-26.05-small 1.0.0-9.1
- nixpkgs-26.05-darwin 1.0.0-9.1

pkgs.coqPackages.TypedExtraction-rust

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

pkgs.coqPackages.TypedExtraction-common

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

pkgs.coqPackages.TypedExtraction-plugin

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

Package maintainers

@4ever2 Eske Nielsen <eske@cs.au.dk>

Untriaged

Permalink CVE-2026-14902

4.0 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

created 1 week ago Activity log

Created suggestion 1 week ago

An open redirect in Ivanti Xtraction before version 2026.2.1 allows …

An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14…

Affected products

Xtraction

==2026.2.1

Matching in nixpkgs

pkgs.coqPackages.TypedExtraction

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

pkgs.coqPackages.CakeMLExtraction

CakeML backend for Peregrine

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-26.05 0.1.0
- nixos-26.05-small 0.1.0
- nixpkgs-26.05-darwin 0.1.0

pkgs.coqPackages.TypedExtraction-elm

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

pkgs.coqPackages.verified-extraction

Verified Extraction from Rocq to OCaml. Including a bootstrapped extraction plugin

nixos-unstable 1.0.0-9.1
- nixpkgs-unstable 1.0.0-9.1
- nixos-unstable-small 1.0.0-9.1
nixos-26.05 1.0.0-9.1
- nixos-26.05-small 1.0.0-9.1
- nixpkgs-26.05-darwin 1.0.0-9.1

pkgs.coqPackages.TypedExtraction-rust

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

pkgs.coqPackages.TypedExtraction-common

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

pkgs.coqPackages.TypedExtraction-plugin

A framework for extracting Rocq programs to Rust and Elm

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1
nixos-26.05 0.2.1
- nixos-26.05-small 0.2.1
- nixpkgs-26.05-darwin 0.2.1

Package maintainers

@4ever2 Eske Nielsen <eske@cs.au.dk>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-8043

9.6 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 2 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 2 months, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 2 months, 2 weeks ago

External control of a file name in Ivanti Xtraction before …

External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to information disclosure and possible client-side attacks.