Suggestions search

All statuses

Filter by:

With package: haskellPackages.morpheus-graphql-subscriptions

Found 3 matching suggestions

View:

Compact

Detailed

Dismissed

(not in Nixpkgs)

Permalink CVE-2025-69171

8.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 month, 1 week ago by @LeSuisse Activity log

Created suggestion 1 month, 1 week ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 1 week ago

WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.

References

https://patchstack.com/database/wordpress/theme/orpheus/vulnerability/wordpress… vdb-entry

Affected products

orpheus

=<1.3

Matching in nixpkgs

pkgs.haskellPackages.morpheus-graphql

None

nixos-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

pkgs.haskellPackages.morpheus-graphql-app

Morpheus GraphQL App

nixos-unstable 0.28.5
- nixpkgs-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

pkgs.haskellPackages.morpheus-graphql-core

None

nixos-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

pkgs.haskellPackages.morpheus-graphql-tests

Morpheus GraphQL Test

nixos-unstable 0.28.5
- nixpkgs-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

pkgs.haskellPackages.morpheus-graphql-client

Morpheus GraphQL Client

nixos-unstable 0.28.5
- nixpkgs-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

pkgs.haskellPackages.morpheus-graphql-server

Morpheus GraphQL

nixos-unstable 0.28.5
- nixpkgs-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

pkgs.haskellPackages.morpheus-graphql-code-gen

None

nixos-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

pkgs.haskellPackages.morpheus-graphql-subscriptions

Morpheus GraphQL Subscriptions

nixos-unstable 0.28.5
- nixpkgs-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

pkgs.haskellPackages.morpheus-graphql-code-gen-utils

Morpheus GraphQL CLI

nixos-unstable 0.28.5
- nixpkgs-unstable 0.28.5
- nixos-unstable-small 0.28.5
nixos-26.05 0.28.5
- nixos-26.05-small 0.28.5
- nixpkgs-26.05-darwin 0.28.5

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24554

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 2 months ago by @LeSuisse Activity log

Created suggestion 2 months ago
@LeSuisse dismissed (not in Nixpkgs) 2 months ago

WordPress WPSubscription plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1.

References

https://patchstack.com/database/wordpress/plugin/subscription/vulnerability/wor… vdb-entry

Affected products

subscription

=<1.9.1

Matching in nixpkgs

pkgs.azure-cli-extensions.subscription

Microsoft Azure Command-Line Tools Subscription Extension

nixos-unstable 1.0.0b2
- nixpkgs-unstable 1.0.0b2
- nixos-unstable-small 1.0.0b2

pkgs.python312Packages.azure-mgmt-subscription

None

pkgs.python313Packages.azure-mgmt-subscription

This is the Microsoft Azure Subscription Management Client Library

nixos-unstable 3.1.1
- nixpkgs-unstable 3.1.1
- nixos-unstable-small 3.1.1

pkgs.python314Packages.azure-mgmt-subscription

This is the Microsoft Azure Subscription Management Client Library

nixos-unstable 3.1.1
- nixpkgs-unstable 3.1.1
- nixos-unstable-small 3.1.1

pkgs.haskellPackages.morpheus-graphql-subscriptions

Morpheus GraphQL Subscriptions

nixos-unstable 0.28.5
- nixpkgs-unstable 0.28.5
- nixos-unstable-small 0.28.5

pkgs.python312Packages.graphql-subscription-manager

None

pkgs.python313Packages.graphql-subscription-manager

Python3 library for graphql subscription manager

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python314Packages.graphql-subscription-manager

Python3 library for graphql subscription manager

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.haskellPackages.amazonka-license-manager-user-subscriptions

Amazon License Manager User Subscriptions SDK

nixos-unstable 2.0-unstable-2025-04-16
- nixpkgs-unstable 2.0-unstable-2025-04-16
- nixos-unstable-small 2.0-unstable-2025-04-16

pkgs.haskellPackages.amazonka-license-manager-linux-subscriptions

Amazon License Manager Linux Subscriptions SDK

nixos-unstable 2.0-unstable-2025-04-16
- nixpkgs-unstable 2.0-unstable-2025-04-16
- nixos-unstable-small 2.0-unstable-2025-04-16

pkgs.python312Packages.mypy-boto3-license-manager-user-subscriptions

None

pkgs.python313Packages.mypy-boto3-license-manager-user-subscriptions

Type annotations for boto3 license-manager-user-subscriptions

nixos-unstable boto3-license-manager-user-subscriptions-1.43.0
- nixpkgs-unstable boto3-license-manager-user-subscriptions-1.43.0
- nixos-unstable-small boto3-license-manager-user-subscriptions-1.43.0

pkgs.python314Packages.mypy-boto3-license-manager-user-subscriptions

Type annotations for boto3 license-manager-user-subscriptions

nixos-unstable boto3-license-manager-user-subscriptions-1.43.0
- nixpkgs-unstable boto3-license-manager-user-subscriptions-1.43.0
- nixos-unstable-small boto3-license-manager-user-subscriptions-1.43.0

pkgs.python312Packages.mypy-boto3-license-manager-linux-subscriptions

None

pkgs.python313Packages.mypy-boto3-license-manager-linux-subscriptions

Type annotations for boto3 license-manager-linux-subscriptions

nixos-unstable boto3-license-manager-linux-subscriptions-1.43.0
- nixpkgs-unstable boto3-license-manager-linux-subscriptions-1.43.0
- nixos-unstable-small boto3-license-manager-linux-subscriptions-1.43.0

pkgs.python314Packages.mypy-boto3-license-manager-linux-subscriptions

Type annotations for boto3 license-manager-linux-subscriptions

nixos-unstable boto3-license-manager-linux-subscriptions-1.43.0
- nixpkgs-unstable boto3-license-manager-linux-subscriptions-1.43.0
- nixos-unstable-small boto3-license-manager-linux-subscriptions-1.43.0

pkgs.python312Packages.types-aiobotocore-license-manager-user-subscriptions

None

pkgs.python313Packages.types-aiobotocore-license-manager-user-subscriptions

Type annotations for aiobotocore license-manager-user-subscriptions

nixos-unstable 3.2.1
- nixpkgs-unstable 3.7.0
- nixos-unstable-small 3.7.0

pkgs.python312Packages.types-aiobotocore-license-manager-linux-subscriptions

None

pkgs.python313Packages.types-aiobotocore-license-manager-linux-subscriptions

Type annotations for aiobotocore license-manager-linux-subscriptions

nixos-unstable 3.2.1
- nixpkgs-unstable 3.7.0
- nixos-unstable-small 3.7.0

Package maintainers

@katexochen Paul Meyer <katexochen0@gmail.com>
@mwilsoncoding Max Wilson <nixpkgs@maxwilson.dev>
@dotlambda ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86 <nix@dotlambda.de>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Dismissed

(not in Nixpkgs)

Permalink CVE-2025-69347

updated 4 months ago by @LeSuisse Activity log

Created suggestion 4 months ago
@LeSuisse dismissed (not in Nixpkgs) 4 months ago

WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSubscription: from n/a through <= 1.8.10.