Nixpkgs Security Tracker

Login with GitHub

Suggestions search

With package: perl538Packages.MathPrimeUtil

Found 1 matching suggestions

View:
Compact
Detailed
Permalink CVE-2025-15550
5.3 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): NONE
  • Integrity impact (I): LOW
  • Availability impact (A): NONE
created 1 month, 3 weeks ago
birkir prime <= 0.4.0.beta.0 - Cross-Site Request Forgery in GraphQL

birkir prime <= 0.4.0.beta.0 contains a cross-site request forgery vulnerability in its GraphQL endpoint that allows attackers to exploit GET-based query requests. Attackers can craft malicious GET requests to trigger unauthorized actions against privileged users by manipulating GraphQL query parameters.

Affected products

prime
  • =<0.4.0.beta.0

Matching in nixpkgs

pkgs.prime-server

Non-blocking (web)server API for distributed computing and SOA based on zeromq

Package maintainers