Registry-support: decompress can delete files outside scope via relative paths
A vulnerability was found in the decompression function of registry-support. This issue can be triggered by an unauthenticated remote attacker when tricking a user into opening a specially modified .tar archive, leading to the cleanup process following relative paths to overwrite or delete files outside the intended scope.
Affected products
- ==1.16.2
Matching in nixpkgs
pkgs.odo
Developer-focused CLI for OpenShift and Kubernetes
-
nixos-unstable -
- nixpkgs-unstable 3.16.1
pkgs.odoo
Open Source ERP and CRM
-
nixos-unstable -
- nixpkgs-unstable 18.0.20250506
pkgs.godot
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.diodon
Aiming to be the best integrated clipboard manager for the Unity desktop
-
nixos-unstable -
- nixpkgs-unstable 1.13.0
pkgs.godot3
Free and Open Source 2D and 3D game engine (X11 tools)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.komodo
Tool to build and deploy software on many servers
-
nixos-unstable -
- nixpkgs-unstable 1.19.3
pkgs.loxodo
Password Safe V3 compatible password vault
-
nixos-unstable -
- nixpkgs-unstable 0-unstable-2021-02-08
pkgs.odoo16
Open Source ERP and CRM
-
nixos-unstable -
- nixpkgs-unstable 16.0.20250506
pkgs.odoo17
Open Source ERP and CRM
-
nixos-unstable -
- nixpkgs-unstable 17.0.20250506
pkgs.todoman
Standards-based task manager based on iCalendar
-
nixos-unstable -
- nixpkgs-unstable 4.6.0
pkgs.mastodon
Self-hosted, globally interconnected microblogging software based on ActivityPub
-
nixos-unstable -
- nixpkgs-unstable 4.4.3
pkgs.pomodoro
Simple CLI pomodoro timer using desktop notifications written in Rust
-
nixos-unstable -
- nixpkgs-unstable 0-unstable-2021-06-18
pkgs.godot_4_3
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.3-stable
pkgs.godot_4_4
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.podofo_0_9
Library to work with the PDF file format
-
nixos-unstable -
- nixpkgs-unstable 0.9.8
pkgs.podofo_1_0
Library to work with the PDF file format
-
nixos-unstable -
- nixpkgs-unstable 1.0.2
pkgs.sleek-todo
Todo manager based on todo.txt syntax
-
nixos-unstable -
- nixpkgs-unstable 2.0.14
pkgs.bodoni-moda
Bodoni Moda a modern no-compromises Bodoni family by indestructible type*
-
nixos-unstable -
- nixpkgs-unstable 2.4-unstable-2024-02-18
pkgs.godot3-mono
Free and Open Source 2D and 3D game engine (mono build)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.podofo_0_10
Library to work with the PDF file format
-
nixos-unstable -
- nixpkgs-unstable 0.10.5
pkgs.godotpcktool
Standalone tool for extracting and creating Godot .pck files
-
nixos-unstable -
- nixpkgs-unstable 2.1
pkgs.koodo-reader
Cross-platform ebook reader
-
nixos-unstable -
- nixpkgs-unstable 2.0.9
pkgs.libre-bodoni
Bodoni fonts adapted for today's web requirements
-
nixos-unstable -
- nixpkgs-unstable 2.000
pkgs.mastodon-bot
Bot to publish twitter, tumblr or rss posts to an mastodon account
-
nixos-unstable -
- nixpkgs-unstable 1.13.8-20220129172727
pkgs.pomodoro-gtk
Simple and intuitive timer application (also named Planytimer)
-
nixos-unstable -
- nixpkgs-unstable 1.4.1
pkgs.todo-txt-cli
Simple plaintext todo list manager
-
nixos-unstable -
- nixpkgs-unstable 2.13.0
pkgs.autodock-vina
One of the fastest and most widely used open-source docking engines
-
nixos-unstable -
- nixpkgs-unstable 1.2.7
pkgs.godot3-server
Free and Open Source 2D and 3D game engine (server)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.koodousfinder
Tool to allows users to search for and analyze Android apps
-
nixos-unstable -
- nixpkgs-unstable 0.1.0
pkgs.gnome-pomodoro
Time management utility for GNOME based on the pomodoro technique
-
nixos-unstable -
- nixpkgs-unstable 0.27.0
pkgs.godot_4_3-mono
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.3-stable
pkgs.godot_4_4-mono
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.godot3-headless
Free and Open Source 2D and 3D game engine (headless)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.bitlbee-mastodon
Bitlbee plugin for Mastodon
-
nixos-unstable -
- nixpkgs-unstable 1.4.5
pkgs.mastodon-archive
Utility for backing up your Mastodon content
-
nixos-unstable -
- nixpkgs-unstable 1.4.2
pkgs.openpomodoro-cli
Command-line Pomodoro tracker which uses the Open Pomodoro Format
-
nixos-unstable -
- nixpkgs-unstable 0.3.0
pkgs.todoist-electron
To-Do List App & Task Manager
-
nixos-unstable -
- nixpkgs-unstable 9.18.0
pkgs.godot3-mono-server
Free and Open Source 2D and 3D game engine (mono server)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.godot3-debug-server
Free and Open Source 2D and 3D game engine (debug server)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.kdePackages.tokodon
Tokodon is a Mastodon client for Plasma and Plasma Mobile
-
nixos-unstable -
- nixpkgs-unstable 25.08.1
pkgs.gnomeExtensions.todo
Lightweight and user-friendly extension designed to help you manage your tasks efficiently. With a minimalistic interface, it allows you to add, modify, and delete tasks effortlessly. No complicated settings, just pure productivity!
-
nixos-unstable -
- nixpkgs-unstable 5
pkgs.godot3-mono-headless
Free and Open Source 2D and 3D game engine (mono headless)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.haskellPackages.todo
A replacement for undefined that gives warnings
-
nixos-unstable -
- nixpkgs-unstable 0.2.0.3
pkgs.godotPackages_4.godot
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.haskellPackages.htodo
A todo application
-
nixos-unstable -
- nixpkgs-unstable 0.0.4
pkgs.gnome-pomodoro-watcher
Helper tool to watch GNOME Pomodoro timer
-
nixos-unstable -
- nixpkgs-unstable 0-unstable-2023-12-20
pkgs.python312Packages.vina
One of the fastest and most widely used open-source docking engines
-
nixos-unstable -
- nixpkgs-unstable 1.2.7
pkgs.python313Packages.vina
One of the fastest and most widely used open-source docking engines
-
nixos-unstable -
- nixpkgs-unstable 1.2.7
pkgs.gnomeExtensions.todotxt
A Gnome shell interface for todo.txt.
-
nixos-unstable -
- nixpkgs-unstable 52
pkgs.godot3-export-templates
Free and Open Source 2D and 3D game engine (nix export templates)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.godotPackages_4_3.godot
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.3-stable
pkgs.godot3-mono-debug-server
Free and Open Source 2D and 3D game engine (mono debug server)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.haskellPackages.Hastodon
mastodon client module for Haskell
-
nixos-unstable -
- nixpkgs-unstable 0.6.0
pkgs.gnomeExtensions.todo-list
Simple todo list, to keep you focused on your daily tasks
-
nixos-unstable -
- nixpkgs-unstable 5
pkgs.nodePackages.mastodon-bot
Bot to publish twitter, tumblr or rss posts to an mastodon account
-
nixos-unstable -
- nixpkgs-unstable 1.13.8-20220129172727
pkgs.python312Packages.todoist
Official Todoist Python API library
-
nixos-unstable -
- nixpkgs-unstable 8.1.4
pkgs.python313Packages.todoist
Official Todoist Python API library
-
nixos-unstable -
- nixpkgs-unstable 8.1.4
pkgs.godot-export-templates-bin
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.godotPackages_4.godot-mono
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.haskellPackages.autodocodec
Self-documenting encoder and decoder
-
nixos-unstable -
- nixpkgs-unstable 0.4.2.2
pkgs.python312Packages.aiodocker
Docker API client for asyncio
-
nixos-unstable -
- nixpkgs-unstable 0.24.0
pkgs.python313Packages.aiodocker
Docker API client for asyncio
-
nixos-unstable -
- nixpkgs-unstable 0.24.0
pkgs.typstPackages.herodot_0_1_0
A package for making linear timelines, inspired by chronology
-
nixos-unstable -
- nixpkgs-unstable 0.1.0
pkgs.godot3-mono-export-templates
Free and Open Source 2D and 3D game engine (nix mono export templates)
-
nixos-unstable -
- nixpkgs-unstable 3.6
pkgs.python312Packages.click-odoo
Odoo scripting helper library
-
nixos-unstable -
- nixpkgs-unstable 1.7.0
pkgs.python312Packages.hatch-odoo
Hatch plugin to develop and package Odoo projects
-
nixos-unstable -
- nixpkgs-unstable 1.0.2
pkgs.python313Packages.click-odoo
Odoo scripting helper library
-
nixos-unstable -
- nixpkgs-unstable 1.7.0
pkgs.python313Packages.hatch-odoo
Hatch plugin to develop and package Odoo projects
-
nixos-unstable -
- nixpkgs-unstable 1.0.2
pkgs.typstPackages.big-todo_0_1_0
Package to insert clear TODOs. Optionallay with an outline
-
nixos-unstable -
- nixpkgs-unstable 0.1.0
pkgs.typstPackages.big-todo_0_2_0
Package to insert clear TODOs, optionally with an outline
-
nixos-unstable -
- nixpkgs-unstable 0.2.0
pkgs.python312Packages.mastodon-py
Python wrapper for the Mastodon API
-
nixos-unstable -
- nixpkgs-unstable 2.1.3
pkgs.python312Packages.pylint-odoo
Odoo plugin for Pylint
-
nixos-unstable -
- nixpkgs-unstable 9.3.3
pkgs.python313Packages.mastodon-py
Python wrapper for the Mastodon API
-
nixos-unstable -
- nixpkgs-unstable 2.1.3
pkgs.python313Packages.pylint-odoo
Odoo plugin for Pylint
-
nixos-unstable -
- nixpkgs-unstable 9.3.3
pkgs.godot_4_3-export-templates-bin
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.3-stable
pkgs.godot_4_4-export-templates-bin
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.python312Packages.pycryptodome
Self-contained cryptographic library
-
nixos-unstable -
- nixpkgs-unstable 3.23.0
pkgs.python313Packages.pycryptodome
Self-contained cryptographic library
-
nixos-unstable -
- nixpkgs-unstable 3.23.0
pkgs.typstPackages.dashy-todo_0_0_1
A method to display TODOs at the side of the page
-
nixos-unstable -
- nixpkgs-unstable 0.0.1
pkgs.typstPackages.dashy-todo_0_0_2
A method to display TODOs at the side of the page
-
nixos-unstable -
- nixpkgs-unstable 0.0.2
pkgs.typstPackages.dashy-todo_0_0_3
A method to display TODOs at the side of the page
-
nixos-unstable -
- nixpkgs-unstable 0.0.3
pkgs.godotPackages_4.export-template
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.haskellPackages.autodocodec-nix
Autodocodec interpreters for nix
-
nixos-unstable -
- nixpkgs-unstable 0.0.1.5
pkgs.python312Packages.pycryptodomex
Self-contained cryptographic library
-
nixos-unstable -
- nixpkgs-unstable 3.23.0
pkgs.python313Packages.pycryptodomex
Self-contained cryptographic library
-
nixos-unstable -
- nixpkgs-unstable 3.23.0
pkgs.haskellPackages.autodocodec-yaml
Autodocodec interpreters for yaml
-
nixos-unstable -
- nixpkgs-unstable 0.4.0.1
pkgs.nodePackages_latest.mastodon-bot
Bot to publish twitter, tumblr or rss posts to an mastodon account
-
nixos-unstable -
- nixpkgs-unstable 1.13.8-20220129172727
pkgs.godotPackages_4_3.export-template
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.3-stable
pkgs.godotPackages_4_4.export-template
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.python312Packages.setuptools-odoo
Setuptools plugin for Odoo addons
-
nixos-unstable -
- nixpkgs-unstable 3.3
pkgs.python312Packages.sphinx-autodoc2
Sphinx extension that automatically generates API documentation for your Python packages
-
nixos-unstable -
- nixpkgs-unstable autodoc2-0.5.0
pkgs.python313Packages.setuptools-odoo
Setuptools plugin for Odoo addons
-
nixos-unstable -
- nixpkgs-unstable 3.3
pkgs.python313Packages.sphinx-autodoc2
Sphinx extension that automatically generates API documentation for your Python packages
-
nixos-unstable -
- nixpkgs-unstable autodoc2-0.5.0
pkgs.haskellPackages.autodocodec-schema
Autodocodec interpreters for JSON Schema
-
nixos-unstable -
- nixpkgs-unstable 0.2.0.1
pkgs.home-assistant-component-tests.todo
Open source home automation that puts local control and privacy first
-
nixos-unstable -
- nixpkgs-unstable 2025.9.3
pkgs.godotPackages_4.export-template-mono
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.godotPackages_4.export-templates-bin
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.haskellPackages.autodocodec-openapi3
Autodocodec interpreters for openapi3
-
nixos-unstable -
- nixpkgs-unstable openapi3-0.2.1.4
pkgs.haskellPackages.autodocodec-swagger2
Autodocodec interpreters for swagger2
-
nixos-unstable -
- nixpkgs-unstable swagger2-0.1.0.0
pkgs.python312Packages.click-odoo-contrib
Collection of community-maintained scripts for Odoo maintenance
-
nixos-unstable -
- nixpkgs-unstable 1.20
pkgs.python312Packages.todoist-api-python
Library for the Todoist REST API
-
nixos-unstable -
- nixpkgs-unstable 2.1.7
pkgs.python313Packages.click-odoo-contrib
Collection of community-maintained scripts for Odoo maintenance
-
nixos-unstable -
- nixpkgs-unstable 1.20
pkgs.python313Packages.todoist-api-python
Library for the Todoist REST API
-
nixos-unstable -
- nixpkgs-unstable 2.1.7
pkgs.python312Packages.python-codon-tables
Codon Usage Tables for Python, from kazusa.or.jp
-
nixos-unstable -
- nixpkgs-unstable 0.1.18
pkgs.python313Packages.python-codon-tables
Codon Usage Tables for Python, from kazusa.or.jp
-
nixos-unstable -
- nixpkgs-unstable 0.1.18
pkgs.godotPackages_4_3.export-template-mono
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.3-stable
pkgs.godotPackages_4_3.export-templates-bin
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.3-stable
pkgs.godotPackages_4_4.export-template-mono
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.home-assistant-component-tests.todoist
Open source home automation that puts local control and privacy first
-
nixos-unstable -
- nixpkgs-unstable 2025.9.3
pkgs.vscode-extensions.geequlim.godot-tools
VS Code extension for game development with Godot Engine and GDScript
-
nixos-unstable -
- nixpkgs-unstable 2.5.1
pkgs.home-assistant-component-tests.mastodon
Open source home automation that puts local control and privacy first
-
nixos-unstable -
- nixpkgs-unstable 2025.9.3
pkgs.vscode-extensions.gruntfuggly.todo-tree
None
-
nixos-unstable -
- nixpkgs-unstable 0.0.226
pkgs.godotPackages_4.export-templates-mono-bin
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.home-assistant-component-tests.local_todo
Open source home automation that puts local control and privacy first
-
nixos-unstable -
- nixpkgs-unstable 2025.9.3
pkgs.vscode-extensions.njpwerner.autodocstring
Generates python docstrings automatically
-
nixos-unstable -
- nixpkgs-unstable 0.6.1
pkgs.python312Packages.sphinx-autodoc-typehints
Type hints (PEP 484) support for the Sphinx autodoc extension
-
nixos-unstable -
- nixpkgs-unstable 3.2.0
pkgs.python313Packages.sphinx-autodoc-typehints
Type hints (PEP 484) support for the Sphinx autodoc extension
-
nixos-unstable -
- nixpkgs-unstable 3.2.0
pkgs.godotPackages_4_3.export-templates-mono-bin
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.3-stable
pkgs.godotPackages_4_4.export-templates-mono-bin
Free and Open Source 2D and 3D game engine
-
nixos-unstable -
- nixpkgs-unstable 4.4.1-stable
pkgs.vscode-extensions.woberg.godot-dotnet-tools
VSCode extension for Godot 4 Mono supporting C# language
-
nixos-unstable -
- nixpkgs-unstable 0.5.1
pkgs.haskellPackages.autodocodec-servant-multipart
Autodocodec interpreters for Servant Multipart
-
nixos-unstable -
- nixpkgs-unstable 0.0.0.1
-
nixos-unstable -
- nixpkgs-unstable 0.25.6
pkgs.vscode-extensions.jgclark.vscode-todo-highlight
Highlight TODOs, FIXMEs, and any keywords, annotations...
-
nixos-unstable -
- nixpkgs-unstable 2.0.8
-
nixos-unstable -
- nixpkgs-unstable 2.0.3
pkgs.python312Packages.tree-sitter-grammars.tree-sitter-godot-resource
Python bindings for tree-sitter-godot-resource
-
nixos-unstable -
- nixpkgs-unstable 0.25.6
pkgs.python313Packages.tree-sitter-grammars.tree-sitter-godot-resource
Python bindings for tree-sitter-godot-resource
-
nixos-unstable -
- nixpkgs-unstable 0.25.6
Package maintainers
-
@natsukium Tomoya Otabi <nixpkgs@natsukium.com>
-
@jpotier Martin Potier <jpo.contributes.to.nixos@marvid.fr>
-
@gavink97 Gavin Kondrath <gavin@gav.ink>
-
@soywod Clément DOUIN <clement.douin@posteo.net>
-
@matthiasbeyer Matthias Beyer <mail@beyermatthias.de>
-
@pSub Pascal Wittmann <mail@pascal-wittmann.de>
-
@woffs Frank Doepper <github@woffs.de>
-
@SFrijters Stefan Frijters <sfrijters@gmail.com>
-
@Aleksanaa Aleksana QwQ <me@aleksana.moe>
-
@Herschenglime Herschenglime
-
@sei40kr Seong Yong-ju <sei40kr@gmail.com>
-
@honnip Jung seungwoo <me@honnip.page>
-
@shiryel Shiryel <contact@shiryel.com>
-
@corngood David McFarland <corngood@gmail.com>
-
@Twey James ‘Twey’ Kay <twey@twey.co.uk>
-
@rotaerk Matthew Stewart <m.scott.stewart@gmail.com>
-
@Ambossmann Timo Gottszky <timogottszky+git@gmail.com>
-
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
-
@dotlambda Robert Schütz <rschuetz17@gmail.com>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@mjm Matt Moriarity <matt@mattmoriarity.com>
-
@NickCao Nick Cao <nickcao@nichi.co>
-
@K900 Ilya K. <me@0upti.me>
-
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
-
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
-
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
-
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
-
@r17x Rin <hi@rin.rocks>
-
@TomaSajt TomaSajt
-
@cmfwyp cmfwyp <cmfwyp@riseup.net>
-
@ghuntley Geoffrey Huntley <ghuntley@ghuntley.com>
-
@Izorkin Yurii Izorkin <Izorkin@gmail.com>
-
@erictapen Kerstin Humm <kerstin@erictapen.name>
-
@happy-river Happy River <happyriver93@runbox.com>
-
@ju1m Julien Moutinho <julm+nixpkgs@sourcephile.fr>
-
@stehessel Stephan Heßelmann <stephan@stehessel.de>
-
@mkg20001 Maciej Krüger <mkg20001+nix@gmail.com>
-
@siriobalmelli Sirio Balmelli <sirio@b-ad.ch>
-
@blackheaven Gautier Di Folco <gautier.difolco@gmail.com>
-
@kuflierl Kennet Flierl <kuflierl@gmail.com>
-
@auroraanna Anna Aurora <anna@annaaurora.eu>
-
@emilytrau Emily Trau <emily+nix@downunderctf.com>
-
@yajo Jairo Llopis <yajo.sk8@gmail.com>
-
@prusnak Pavol Rusnak <pavol@rusnak.io>
-
@A-jay98 Ali Jamadi <ali@jamadi.me>
-
@mightyiam Shahar "Dawn" Or <mightyiampresence@gmail.com>
-
@adfaure Adrien Faure <adfaure@pm.me>
-
@stepbrobd Yifei Sun <ysun@hey.com>
-
@ByteSudoer ByteSudoer <bytesudoer@gmail.com>
-
@sioodmy Antoni Sokołowski
-
@ewok-old Artur Taranchiev <ewok@ewok.ru>
-
@pokon548 Bu Kun <nix@bukn.uk>
-
@kylesferrazza Kyle Sferrazza <nixpkgs@kylesferrazza.com>
-
@leenaars Michiel Leenaars <ml.software@leenaa.rs>
-
@antonmosich Anton Mosich <anton@mosich.at>
-
@cherrypiejam Gongqi Huang
-
@thtrf thtrf <thtrf@proton.me>
-
@kamadorueda Kevin Amado <kamadorueda@gmail.com>