Nixpkgs security tracker
4.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
Canva Desktop before v1.125.0 performed double decoding in the deeplink …
Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrary same-origin content under the user’s session.
Affected products
- <1.125.0
Matching in nixpkgs
pkgs.fgqcanvas
Qt-based remote canvas application for FlightGear
-
nixos-unstable -
- nixos-unstable-small 0-unstable-2024-02-11
-
nixos-26.05 -
- nixos-26.05-small 0-unstable-2024-02-11
pkgs.goocanvas2
Canvas widget for GTK based on the the Cairo 2D library
pkgs.goocanvas3
Canvas widget for GTK based on the the Cairo 2D library
pkgs.goocanvas_1
None
-
nixos-26.05 -
- nixos-26.05-small 1.0.0
pkgs.goocanvas_2
Canvas widget for GTK based on the the Cairo 2D library
pkgs.goocanvas_3
Canvas widget for GTK based on the the Cairo 2D library
pkgs.goocanvasmm2
C++ bindings for GooCanvas
pkgs.idrisPackages.canvas
Idris FFI binding for html5 canvas 2d api
-
nixos-unstable -
- nixos-unstable-small 2017-11-09
-
nixos-26.05 -
- nixos-26.05-small 2017-11-09
pkgs.gnome2.libgnomecanvas
None
-
nixos-26.05 -
- nixos-26.05-small 2.30.3
pkgs.perlPackages.GooCanvas
None
-
nixos-26.05 -
- nixos-26.05-small 0.06
pkgs.perl5Packages.GooCanvas
None
-
nixos-26.05 -
- nixos-26.05-small 0.06
pkgs.perlPackages.GooCanvas2
Perl binding for GooCanvas2 widget using Glib::Object::Introspection
pkgs.perlPackages.WxGLCanvas
wxPerl demo helper for Wx::GLCanvas
pkgs.perl5Packages.GooCanvas2
Perl binding for GooCanvas2 widget using Glib::Object::Introspection
pkgs.perl5Packages.WxGLCanvas
wxPerl demo helper for Wx::GLCanvas
pkgs.python313Packages.ipycanvas
Expose the browser's Canvas API to IPython
pkgs.python314Packages.ipycanvas
Expose the browser's Canvas API to IPython
pkgs.haskellPackages.blank-canvas
HTML5 Canvas Graphics Library
pkgs.haskellPackages.yampa-canvas
blank-canvas frontend for Yampa
pkgs.python313Packages.rendercanvas
One canvas API, multiple backends
pkgs.python314Packages.rendercanvas
One canvas API, multiple backends
pkgs.haskellPackages.diagrams-canvas
HTML5 canvas backend for diagrams drawing EDSL
pkgs.perlPackages.GooCanvas2CairoTypes
Bridge between GooCanvas2 and Cairo types
pkgs.perl5Packages.GooCanvas2CairoTypes
Bridge between GooCanvas2 and Cairo types
pkgs.obs-studio-plugins.obs-vertical-canvas
Plugin for OBS Studio to add vertical canvas
Package maintainers
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@Pandapip1 Gavin John <gavinnjohn@gmail.com>
-
@brainrake Marton Boros <martonboros@gmail.com>
-
@flexiondotorg Martin Wimpress <martin@wimpress.org>
-
@jonhermansen Jon Hermansen <jon@jh86.org>
-
@bcdarwin Ben Darwin <bcdarwin@gmail.com>
-
@bengsparks Ben Sparks <benjamin.sparks@protonmail.com>