Nixpkgs security tracker

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-65526

8.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 3 days, 1 hour ago by @LeSuisse Activity log

Created suggestion 3 days, 16 hours ago
@LeSuisse dismissed (not in Nixpkgs) 3 days, 1 hour ago

WordPress Visualizer plugin <= 4.0.6 - SQL Injection vulnerability

Contributor SQL Injection in Visualizer <= 4.0.6 versions.

References

https://patchstack.com/database/wordpress/plugin/visualizer/vulnerability/wordp… vdb-entry

Affected products

visualizer

=<4.0.6

Matching in nixpkgs

pkgs.dbvisualizer

Universal database tool

nixos-unstable 25.3.3
- nixpkgs-unstable 25.3.3
- nixos-unstable-small 26.1.3
nixos-26.05 25.3.3
- nixos-26.05-small 25.3.3
- nixpkgs-26.05-darwin 25.3.3

pkgs.midivisualizer

Small MIDI visualizer tool, using OpenGL

nixos-unstable 7.3
- nixpkgs-unstable 7.3
- nixos-unstable-small 7.3
nixos-26.05 7.3
- nixos-26.05-small 7.3
- nixpkgs-26.05-darwin 7.3

pkgs.pulse-visualizer

Real-time audio visualizer inspired by MiniMeters

nixos-unstable 1.3.9
- nixpkgs-unstable 1.3.9
- nixos-unstable-small 1.3.9
nixos-26.05 1.3.9
- nixos-26.05-small 1.3.9
- nixpkgs-26.05-darwin 1.3.9

pkgs.mpvScripts.visualizer

Various audio visualization

nixos-unstable 0-unstable-2025-11-07
- nixpkgs-unstable 0-unstable-2025-11-07
- nixos-unstable-small 0-unstable-2025-11-07
nixos-26.05 0-unstable-2025-11-07
- nixos-26.05-small 0-unstable-2025-11-07
- nixpkgs-26.05-darwin 0-unstable-2025-11-07

pkgs.pkgsRocm.midivisualizer

Small MIDI visualizer tool, using OpenGL

nixos-unstable 7.3
- nixpkgs-unstable 7.3
- nixos-unstable-small 7.3
nixos-26.05 7.3
- nixos-26.05-small 7.3
- nixpkgs-26.05-darwin 7.3

pkgs.precice-config-visualizer

Small python tool for visualizing the preCICE xml configuration

nixos-unstable 2022-02-23
- nixpkgs-unstable 2022-02-23
- nixos-unstable-small 2022-02-23
nixos-26.05 2022-02-23
- nixos-26.05-small 2022-02-23
- nixpkgs-26.05-darwin 2022-02-23

pkgs.kdePackages.massif-visualizer

Visualizer for Valgrind Massif data files

nixos-unstable 26.04.2
- nixpkgs-unstable 26.04.2
- nixos-unstable-small 26.04.3
nixos-26.05 26.04.2
- nixos-26.05-small 26.04.3
- nixpkgs-26.05-darwin 26.04.2

Package maintainers

@boldikoller Boldi Koller <boldi.koller@wtss.eu>
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
@bkchr Bastian Köcher <nixos@kchr.de>
@FRidh Frederik Rietdijk <fridh@fridh.nl>
@NickCao Nick Cao <nickcao@nichi.co>
@mjm Matt Moriarity <matt@mattmoriarity.com>
@peterhoeg Peter Hoeg <peter@hoeg.com>
@K900 Ilya K. <me@0upti.me>
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
@nyanloutre Paul Trehiou <paul@nyanlout.re>
@ericdallo Eric Dallo <ercdll1337@gmail.com>
@kmein Kierán Meinhardt <kmein@posteo.de>
@Scriptkiddi Fritz Otlinghaus <nixos@scriptkiddi.de>
@fndov Tommy B <miyu@allthingslinux.org>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-24573

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 2 months ago by @LeSuisse Activity log

Created suggestion 2 months ago
@LeSuisse dismissed (not in Nixpkgs) 2 months ago

WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n/a before 4.0.0.