Nixpkgs security tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: nodePackages.coc-explorer

Found 1 matching suggestions

View:
Compact
Detailed
Dismissed
(not in Nixpkgs)
Permalink CVE-2026-5383
4.4 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): HIGH
  • User interaction (UI): NONE
  • Scope (S): CHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): LOW
  • Availability impact (A): LOW
updated 2 days, 1 hour ago by @LeSuisse Activity log
  • Created automatic suggestion 2 days, 10 hours ago
  • @LeSuisse dismissed (not in Nixpkgs) 2 days, 1 hour ago
runZero Explorer missing authorization check

An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L (4.4 Medium). This issue was fixed in version 4.0.260208.0 of the runZero Explorer.

Affected products

Explorer
  • <4.0.260208.0

Matching in nixpkgs

pkgs.dataexplorer

Graphical tool to analyze data, gathered from various hardware devices

pkgs.promexplorer

Simple tool to explore prometheus exporter metrics

pkgs.btc-rpc-explorer

Database-free, self-hosted Bitcoin explorer, via RPC to Bitcoin Core

pkgs.keystore-explorer

Open source GUI replacement for the Java command-line utilities keytool and jarsigner

Package maintainers