Nixpkgs Security Tracker

Permalink CVE-2026-28297

6.1 MEDIUM

CVSS version: 3.1
Attack vector (AV): ADJACENT_NETWORK
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 3 days, 15 hours ago

SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability

SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.

References

Affected products

2026.1.1

==2026.1.1 and previous versions

Matching in nixpkgs

pkgs.discourse

Open source discussion platform

nixos-unstable -
- nixpkgs-unstable 2026.1.1

pkgs.cloudflare-warp

Replaces the connection between your device and the Internet with a modern, optimized, protocol

nixos-unstable 2026.1.150.0
- nixpkgs-unstable 2026.1.150.0
- nixos-unstable-small 2026.1.150.0

pkgs.discourseAllPlugins

Open source discussion platform

nixos-unstable -
- nixpkgs-unstable 2026.1.1

pkgs.vaultwarden-webvault

Integrates the web vault into vaultwarden

nixos-unstable 2026.1.1+0
- nixpkgs-unstable 2026.1.1+0
- nixos-unstable-small 2026.1.1+0

pkgs.python313Packages.limnoria

Modified version of Supybot, an IRC bot

nixos-unstable 2026.1.16
- nixpkgs-unstable 2026.1.16
- nixos-unstable-small 2026.1.16

pkgs.python313Packages.tifffile

Read and write image data from and to TIFF files

nixos-unstable 2026.1.14
- nixpkgs-unstable 2026.1.14
- nixos-unstable-small 2026.1.14

pkgs.python314Packages.limnoria

Modified version of Supybot, an IRC bot

nixos-unstable 2026.1.16
- nixpkgs-unstable 2026.1.16
- nixos-unstable-small 2026.1.16

pkgs.python314Packages.tifffile

Read and write image data from and to TIFF files

nixos-unstable 2026.1.14
- nixpkgs-unstable 2026.1.14
- nixos-unstable-small 2026.1.14

pkgs.matrix-alertmanager-receiver

Alertmanager client that forwards alerts to a Matrix room

nixos-25.11 2026.1.14
- nixos-25.11-small 2026.1.14
- nixpkgs-25.11-darwin 2026.1.14

pkgs.python313Packages.astropy-iers-data

IERS data maintained by @astrofrog and astropy.utils.iers maintainers

nixos-unstable 0.2026.1.19.0.42.31
- nixpkgs-unstable 0.2026.1.19.0.42.31
- nixos-unstable-small 0.2026.1.19.0.42.31

pkgs.python313Packages.trove-classifiers

Canonical source for classifiers on PyPI

nixos-unstable 2026.1.14.14
- nixpkgs-unstable 2026.1.14.14
- nixos-unstable-small 2026.1.14.14

pkgs.python314Packages.astropy-iers-data