Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: libblocksruntime

Found 2 matching suggestions

Untriaged
Permalink CVE-2023-44262
created 5 months, 2 weeks ago
WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Renzo Johnson Blocks plugin <= 1.6.41 versions.

References

Affected products

blocks
  • =<1.6.41

Matching in nixpkgs

pkgs.i3blocks

Flexible scheduler for your i3bar blocks

  • nixos-unstable -

pkgs.codeblocks

Open source, cross platform, free C, C++ and Fortran IDE

  • nixos-unstable -

pkgs.i3blocks-gaps

Flexible scheduler for your i3bar blocks -- this is a fork to use with i3-gaps

  • nixos-unstable -

pkgs.codeblocksFull

Open source, cross platform, free C, C++ and Fortran IDE

  • nixos-unstable -
Untriaged
Permalink CVE-2023-29403
created 5 months, 2 weeks ago
Unsafe behavior in setuid/setgid binaries in runtime

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.

References

Affected products

runtime
  • <1.20.5
  • <1.19.10

Matching in nixpkgs

pkgs.onnxruntime

Cross-platform, high performance scoring engine for ML models

  • nixos-unstable -

pkgs.kata-runtime

Lightweight Virtual Machines like containers that provide the workload isolation and security of VMs

  • nixos-unstable -

pkgs.aws-lambda-rie

Locally test Lambda functions packaged as container images

  • nixos-unstable -

pkgs.dotnetCorePackages.runtime_9_0

Core functionality needed to create .NET Core projects, that is shared between Visual Studio and CLI (wrapper)

  • nixos-unstable -