Nixpkgs security tracker

Login with GitHub

Suggestions search

Dismissed
Filter by:
With package: home-assistant-component-tests.diagnostics

Found 2 matching suggestions

View:
Compact
Detailed
Dismissed
(not in Nixpkgs)
Permalink CVE-2026-0827
7.1 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
updated 1 month, 1 week ago by @LeSuisse Activity log
  • Created suggestion 1 month, 1 week ago
  • @LeSuisse dismissed (not in Nixpkgs) 1 month, 1 week ago
During an internal security assessment, a potential vulnerability was discovered …

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Affected products

Diagnostics
  • <5.26.0
HardwareScanAddin
  • <4.7.1.4

Matching in nixpkgs

Package maintainers

Dismissed
(not in Nixpkgs)
Permalink CVE-2026-35002
updated 1 month, 2 weeks ago by @pyrox0 Activity log
  • Created suggestion 1 month, 3 weeks ago
  • @pyrox0 ignored
    2 packages
    • agnos
    • iagno
    1 month, 2 weeks ago
  • @pyrox0 dismissed (not in Nixpkgs) 1 month, 2 weeks ago
Agno < 2.3.24 field_type Eval Injection Arbitrary Code Execution

Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field_type value in a FunctionCall to achieve remote code execution.

Affected products

Agno
  • ==cbf675521d4d2281925a051784a3b94172e56416
  • <2.3.24

Matching in nixpkgs

pkgs.nixf-diagnose

CLI wrapper for nixf-tidy with fancy diagnostic output

Ignored packages (2)

pkgs.agnos

Obtains certificates from Let's Encrypt using DNS-01 without the need for API access to the DNS provider

pkgs.iagno

Computer version of the game Reversi, more popularly called Othello

Package maintainers