Nixpkgs security tracker

Untriaged

Permalink CVE-2026-44974

7.7 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): Low (L)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): High (H)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): Low (L)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): High (H)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 6 days, 15 hours ago Activity log

Created suggestion 6 days, 15 hours ago

Parameter smuggling in @hapi/content header parser allows upload-filter bypass via duplicate parameters

@hapi/content provided HTTP Content-* headers parsing. Prior to 6.0.2, Content.disposition() retained the last occurrence of each duplicate parameter while Content.type() retained the first occurrence of duplicate charset and boundary parameters, creating a parameter-smuggling primitive when another component in the request-processing chain resolves duplicates the opposite way. This can allow an upload filename allowlist bypass in headers such as Content-Disposition: form-data; name="file"; filename="safe.txt"; filename="shell.php". This issue is fixed in version 6.0.2.

References

https://github.com/hapijs/content/security/advisories/GHSA-36hh-x5p5-jgc8 x_refsource_CONFIRM
https://github.com/hapijs/content/commit/3850079550c191d25e3643dc82a6d61144db8c2f x_refsource_MISC

Affected products

content

==< 6.0.2

Matching in nixpkgs

pkgs.malcontent

Parental controls library

nixos-unstable 0.13.1
- nixpkgs-unstable 0.13.1
- nixos-unstable-small 0.13.1
nixos-26.05 0.13.1
- nixos-26.05-small 0.13.1
- nixpkgs-26.05-darwin 0.13.1

pkgs.jazz2-content

Assets needed for jazz2

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small
nixos-26.05 -
- nixos-26.05-small
- nixpkgs-26.05-darwin

pkgs.malcontent-ui

UI components for parental controls library

nixos-unstable 0.13.1
- nixpkgs-unstable 0.13.1
- nixos-unstable-small 0.13.1
nixos-26.05 0.13.1
- nixos-26.05-small 0.13.1
- nixpkgs-26.05-darwin 0.13.1

pkgs.lomiri.content-hub

Content sharing/picking service for the Lomiri desktop

nixos-unstable 2.2.3
- nixpkgs-unstable 2.2.3
- nixos-unstable-small 2.2.3
nixos-26.05 2.2.3
- nixos-26.05-small 2.2.3
- nixpkgs-26.05-darwin 2.2.3

pkgs.lomiri.lomiri-content-hub

Content sharing/picking service for the Lomiri desktop

nixos-unstable 2.2.3
- nixpkgs-unstable 2.2.3
- nixos-unstable-small 2.2.3
nixos-26.05 2.2.3
- nixos-26.05-small 2.2.3
- nixpkgs-26.05-darwin 2.2.3

pkgs.lomiri-qt6.lomiri-content-hub

Content sharing/picking service for the Lomiri desktop

nixos-unstable 2.2.3
- nixpkgs-unstable 2.2.3
- nixos-unstable-small 2.2.3
nixos-26.05 2.2.3
- nixos-26.05-small 2.2.3
- nixpkgs-26.05-darwin 2.2.3

pkgs.perlPackages.TestFileContents

Test routines for examining the contents of files

nixos-unstable 0.242
- nixpkgs-unstable 0.242
- nixos-unstable-small 0.242
nixos-26.05 0.242
- nixos-26.05-small 0.242
- nixpkgs-26.05-darwin 0.242

pkgs.perl5Packages.TestFileContents

Test routines for examining the contents of files

nixos-unstable 0.242
- nixpkgs-unstable 0.242
- nixos-unstable-small 0.242
nixos-26.05 0.242
- nixos-26.05-small 0.242
- nixpkgs-26.05-darwin 0.242

pkgs.perlPackages.EmailMIMEContentType

Parse and build a MIME Content-Type or Content-Disposition Header

nixos-unstable 1.028
- nixpkgs-unstable 1.028
- nixos-unstable-small 1.028
nixos-26.05 1.028
- nixos-26.05-small 1.028
- nixpkgs-26.05-darwin 1.028

pkgs.haskellPackages.directory-contents

Recursively build, navigate, and operate on a tree of directory contents

nixos-unstable 0.2.0.3
- nixpkgs-unstable 0.2.0.3
- nixos-unstable-small 0.2.0.3
nixos-26.05 0.2.0.3
- nixos-26.05-small 0.2.0.3
- nixpkgs-26.05-darwin 0.2.0.3

pkgs.perl5Packages.EmailMIMEContentType

Parse and build a MIME Content-Type or Content-Disposition Header

nixos-unstable 1.028
- nixpkgs-unstable 1.028
- nixos-unstable-small 1.028
nixos-26.05 1.028
- nixos-26.05-small 1.028
- nixpkgs-26.05-darwin 1.028

pkgs.python313Packages.zope-contenttype

Utility module for content-type (MIME type) handling

nixos-unstable 6.0
- nixpkgs-unstable 6.0
- nixos-unstable-small 6.0
nixos-26.05 6.0
- nixos-26.05-small 6.0
- nixpkgs-26.05-darwin 6.0

pkgs.python314Packages.zope-contenttype

Utility module for content-type (MIME type) handling

nixos-unstable 6.0
- nixpkgs-unstable 6.0
- nixos-unstable-small 6.0
nixos-26.05 6.0
- nixos-26.05-small 6.0
- nixpkgs-26.05-darwin 6.0

pkgs.haskellPackages.pdf-toolbox-content

A collection of tools for processing PDF files

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2
nixos-26.05 0.1.2
- nixos-26.05-small 0.1.2
- nixpkgs-26.05-darwin 0.1.2

pkgs.haskellPackages.servant-fiat-content

Fiat content types

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-26.05 1.0.1
- nixos-26.05-small 1.0.1
- nixpkgs-26.05-darwin 1.0.1

pkgs.ocamlPackages.content_security_policy

Library for building content-security policies

nixos-unstable 0.17.0
- nixpkgs-unstable 0.17.0
- nixos-unstable-small 0.17.0
nixos-26.05 0.17.0
- nixos-26.05-small 0.17.0
- nixpkgs-26.05-darwin 0.17.0

pkgs.haskellPackages.gogol-shopping-content

Google Content API for Shopping SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-26.05 1.0.0
- nixos-26.05-small 1.0.0
- nixpkgs-26.05-darwin 1.0.0

pkgs.ocamlPackages_latest.content_security_policy

Library for building content-security policies

nixos-unstable 0.17.0
- nixpkgs-unstable 0.17.0
- nixos-unstable-small 0.17.0
nixos-26.05 0.17.0
- nixos-26.05-small 0.17.0
- nixpkgs-26.05-darwin 0.17.0

pkgs.ocamlPackages.janeStreet.content_security_policy

Library for building content-security policies

nixos-unstable 0.17.0
- nixpkgs-unstable 0.17.0
- nixos-unstable-small 0.17.0
nixos-26.05 0.17.0
- nixos-26.05-small 0.17.0
- nixpkgs-26.05-darwin 0.17.0

pkgs.wordpressPackages.plugins.add-widget-after-content

None

nixos-unstable 2.5.3
- nixpkgs-unstable 2.5.3
- nixos-unstable-small 2.5.3
nixos-26.05 2.5.3
- nixos-26.05-small 2.5.3
- nixpkgs-26.05-darwin 2.5.3

pkgs.ocamlPackages_latest.janeStreet.content_security_policy

Library for building content-security policies

nixos-unstable 0.17.0
- nixpkgs-unstable 0.17.0
- nixos-unstable-small 0.17.0
nixos-26.05 0.17.0
- nixos-26.05-small 0.17.0
- nixpkgs-26.05-darwin 0.17.0

Package maintainers

@surfaceflinger nat <nat@nekopon.pl>
@e-v-o-l-v-e Ivanoe Megnin-Preiss <oss@imp-network.com>
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>
@jtojnar Jan Tojnar <jtojnar@gmail.com>

Untriaged

Permalink CVE-2026-44931

5.1 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): Low (L)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): Low (L)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 2 months, 1 week ago Activity log

Created suggestion 2 months, 1 week ago

malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd

References

Affected products

malcontent

<unknown

Matching in nixpkgs

pkgs.malcontent

Parental controls library

nixos-unstable 0.13.1
- nixpkgs-unstable 0.13.1
- nixos-unstable-small 0.13.1

pkgs.malcontent-ui

UI components for parental controls library

nixos-unstable 0.13.1
- nixpkgs-unstable 0.13.1
- nixos-unstable-small 0.13.1

Package maintainers

@jtojnar Jan Tojnar <jtojnar@gmail.com>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.malcontent

pkgs.jazz2-content

pkgs.malcontent-ui

pkgs.lomiri.content-hub

pkgs.local-content-share

pkgs.lomiri.lomiri-content-hub

pkgs.lomiri-qt6.lomiri-content-hub

pkgs.perlPackages.TestFileContents

pkgs.perl5Packages.TestFileContents

pkgs.perlPackages.EmailMIMEContentType

pkgs.haskellPackages.directory-contents

pkgs.perl5Packages.EmailMIMEContentType

pkgs.python313Packages.zope-contenttype

pkgs.python314Packages.zope-contenttype

pkgs.haskellPackages.pdf-toolbox-content

pkgs.haskellPackages.servant-fiat-content

pkgs.ocamlPackages.content_security_policy

pkgs.haskellPackages.gogol-shopping-content

pkgs.ocamlPackages_latest.content_security_policy

pkgs.ocamlPackages.janeStreet.content_security_policy

pkgs.wordpressPackages.plugins.add-widget-after-content

pkgs.ocamlPackages_latest.janeStreet.content_security_policy

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.malcontent

pkgs.malcontent-ui

Package maintainers