Nixpkgs security tracker

Permalink CVE-2026-47206

2.3 LOW

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): Low (L)
Subsequent System Impact Integrity (SI): Low (L)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Low (L)
Modified Subsequent System Impact Integrity (MSI): Low (L)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 4 weeks, 1 day ago Activity log

Created suggestion 4 weeks, 1 day ago

Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.9, Dragonfly has a RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer. An authenticated user can inject arbitrary RESP messages into the connection's response stream, potentially causing response desynchronization in connection-pool clients. This vulnerability is fixed in 1.39.9.

References

https://github.com/dragonflydb/dragonfly/security/advisories/GHSA-h77h-c6hc-qc9h x_refsource_CONFIRM
https://github.com/dragonflydb/dragonfly/issues/7328 x_refsource_MISCexploit
https://github.com/dragonflydb/dragonfly/pull/7332 x_refsource_MISC

Affected products

dragonfly

==< 1.38.9

Matching in nixpkgs

pkgs.dragonflydb

Modern replacement for Redis and Memcached

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
- nixos-unstable-small 1.34.2
nixos-26.05 1.34.2
- nixos-26.05-small 1.34.2
- nixpkgs-26.05-darwin 1.34.2

pkgs.dragonfly-reverb

Hall-style reverb based on freeverb3 algorithms

nixos-unstable 3.2.10
- nixpkgs-unstable 3.2.10
- nixos-unstable-small 3.2.10
nixos-26.05 3.2.10
- nixos-26.05-small 3.2.10
- nixpkgs-26.05-darwin 3.2.10

pkgs.python312Packages.dragonfly

None

pkgs.python313Packages.dragonfly

Speech recognition framework allowing powerful Python-based scripting

nixos-unstable 0.35.0
- nixpkgs-unstable 0.35.0
- nixos-unstable-small 0.35.0
nixos-26.05 0.35.0
- nixos-26.05-small 0.35.0
- nixpkgs-26.05-darwin 0.35.0

pkgs.python314Packages.dragonfly

Speech recognition framework allowing powerful Python-based scripting

nixos-unstable 0.35.0
- nixpkgs-unstable 0.35.0
- nixos-unstable-small 0.35.0
nixos-26.05 0.35.0
- nixos-26.05-small 0.35.0
- nixpkgs-26.05-darwin 0.35.0

Package maintainers

@magnetophon Bart Brouns <bart@magnetophon.nl>
@mrtnvgr Egor Martynov
@typedrat Alexis Williams <alexis@typedr.at>
@Yureien Soham Sen <contact@sohamsen.me>

Permalink CVE-2026-24825

created 5 months, 4 weeks ago Activity log

Created suggestion 5 months, 4 weeks ago

a memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/yajl modules). This vulnerability is associated with program files yail_tree.C. This issue affects ydb: through 24.4.4.2.