Nixpkgs Security Tracker

Permalink CVE-2026-22407

5.4 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): NONE

created 2 months ago

WordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through <= 2.1.1.

References

Affected products

roam

=<<= 2.1.1

Matching in nixpkgs

pkgs.geteduroam

GUI client to configure eduroam

nixos-unstable 0.12
- nixpkgs-unstable 0.12
- nixos-unstable-small 0.12

pkgs.roam-research

Note-taking tool for networked thought

nixos-unstable 0.0.22
- nixpkgs-unstable 0.0.22
- nixos-unstable-small 0.0.22

pkgs.geteduroam-cli

CLI client to configure eduroam

nixos-unstable 0.12
- nixpkgs-unstable 0.12
- nixos-unstable-small 0.12

pkgs.easyroam-connect-desktop

Manage and install your easyroam WiFi profiles

nixos-unstable 1.4.3
- nixpkgs-unstable 1.4.3
- nixos-unstable-small 1.4.3

Package maintainers

@MarchCraft Felix Nilles <felix@dienilles.de>
@manyinsects liv <shadows@with.al>
@pbsds Peder Bergebakken Sundt <pbsds@hotmail.com>
@viperML Fernando Ayats <ayatsfer@gmail.com>
@dbalan Dhananjay Balan <nix@dbalan.in>

Suggestions search