Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestions search

All statuses
Filter by:
With package: pidginPackages.purple-googlechat

Found 2 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-100582
7.1 HIGH
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): High (H)
  • Vulnerable System Impact Integrity (VI): None (N)
  • Vulnerable System Impact Availability (VA): None (N)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): High (H)
  • Modified Vulnerable System Impact Integrity (MVI): None (N)
  • Modified Vulnerable System Impact Availability (MVA): None (N)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
  • Exploit Maturity (E): Not Defined (X)
updated 1 day, 10 hours ago by @symphorien Activity log
  • Created suggestion 1 day, 17 hours ago
  • @symphorien ignored
    41 packages
    • cmatrix
    • rmatrix
    • tmatrix
    • dendrite
    • gomatrix
    • matrix-dl
    • matrix-synapse-plugins.matrix-synapse-s3-storage-provider
    • matrix-synapse-plugins.matrix-synapse-shared-secret-auth
    • matrix-synapse-plugins.matrix-synapse-mjolnir-antispam
    • matrix-synapse-plugins.matrix-http-rendezvous-synapse
    • matrix-synapse-plugins.matrix-synapse-ldap3
    • matrix-synapse-plugins.matrix-synapse-pam
    • unimatrix
    • libcmatrix
    • matrix-hook
    • matrix-brandy
    • matrix-conduit
    • matrix-synapse
    • matrix-tuwunel
    • matrix-hookshot
    • kodiPackages.six
    • matrix-gtk-theme
    • weechat-matrix-rs
    • mautrix-googlechat
    • kodiPackages.future
    • kodiPackages.upnext
    • matrix-alertmanager
    • matrix-commander-rs
    • matrix-continuwuity
    • matrix-zulip-bridge
    • kodiPackages.routing
    • kodiPackages.signals
    • matrix-appservice-irc
    • kodiPackages.defusedxml
    • haskellPackages.hmatrix
    • matrix-appservice-discord
    • haskellPackages.hmatrix-gsl
    • haskellPackages.hmatrix-csv
    • python313Packages.matrix-nio
    • python314Packages.matrix-nio
    • weechatScripts.weechat-matrix-bridge
    1 day, 10 hours ago
OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass

OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channel read allowlist for caller-supplied explicit read targets in message, reaction, pin, member, and related metadata read actions. A lower-trust sender or a steered agent with access to a channel read action can therefore retrieve content or metadata from channels or rooms excluded by the operator's read policy; the practical impact depends on the permissions held by the connected bot account. The issue is fixed in 2026.8.1.

Affected products

feishu
  • <2026.8.1
  • ==2026.8.1
matrix
  • <2026.8.1
  • ==2026.8.1
msteams
  • <2026.8.1
  • ==2026.8.1
googlechat
  • <2026.8.1
  • ==2026.8.1

Matching in nixpkgs

pkgs.feishu

All-in-one collaboration suite

  • nixos-unstable -
  • nixos-26.05 -

pkgs.feishu-cli

CLI for Feishu (Lark) Open Platform

  • nixos-unstable -
  • nixos-26.05 -

pkgs.matrix-corporal

Reconciliator and gateway for a managed Matrix server

  • nixos-unstable -
    • nixos-unstable-small 2.2.0
  • nixos-26.05 -
    • nixos-26.05-small 2.2.0

pkgs.matrix-commander

Simple but convenient CLI-based Matrix client app for sending and receiving

  • nixos-unstable -
    • nixos-unstable-small 8.0.5
  • nixos-26.05 -
    • nixos-26.05-small 8.0.5

pkgs.matrix-media-repo

Highly configurable multi-domain media repository for Matrix

  • nixos-unstable -
    • nixos-unstable-small 1.3.8
  • nixos-26.05 -
    • nixos-26.05-small 1.3.8

pkgs.python313Packages.canmatrix

Support and convert several CAN (Controller Area Network) database formats

  • nixos-unstable -
    • nixos-unstable-small 1.2
  • nixos-26.05 -
    • nixos-26.05-small 1.2

pkgs.python314Packages.canmatrix

Support and convert several CAN (Controller Area Network) database formats

  • nixos-unstable -
    • nixos-unstable-small 1.2
  • nixos-26.05 -
    • nixos-26.05-small 1.2

pkgs.gnomeExtensions.workspace-matrix

Arrange workspaces in a two dimensional grid with workspace thumbnails.

  • nixos-unstable -
    • nixos-unstable-small 53
  • nixos-26.05 -
    • nixos-26.05-small 53
Ignored packages (41)

pkgs.cmatrix

Simulates the falling characters theme from The Matrix movie

  • nixos-unstable -
    • nixos-unstable-small 2.0
  • nixos-26.05 -
    • nixos-26.05-small 2.0

pkgs.rmatrix

Digital rain for modern terminals

  • nixos-unstable -
    • nixos-unstable-small 0.3.3

pkgs.tmatrix

Terminal based replica of the digital rain from The Matrix

  • nixos-unstable -
    • nixos-unstable-small 1.4
  • nixos-26.05 -
    • nixos-26.05-small 1.4

pkgs.dendrite

Second-generation Matrix homeserver written in Go

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gomatrix

Displays "The Matrix" in a terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.libcmatrix

Matrix protocol library written in C using GObject

  • nixos-unstable -
    • nixos-unstable-small 0.0.4
  • nixos-26.05 -
    • nixos-26.05-small 0.0.4

pkgs.matrix-hook

Simple webhook for matrix

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0

pkgs.matrix-brandy

Matrix Brandy BASIC VI for Linux, Windows, MacOSX

  • nixos-unstable -
  • nixos-26.05 -

pkgs.matrix-conduit

Matrix homeserver written in Rust

  • nixos-unstable -
  • nixos-26.05 -

pkgs.matrix-tuwunel

Matrix homeserver written in Rust, official successor to conduwuit

  • nixos-unstable -
    • nixos-unstable-small 1.9.3
  • nixos-26.05 -
    • nixos-26.05-small 1.9.1

pkgs.matrix-hookshot

Bridge between Matrix and multiple project management services, such as GitHub, GitLab and JIRA

  • nixos-unstable -
    • nixos-unstable-small 7.5.0
  • nixos-26.05 -
    • nixos-26.05-small 7.5.0

pkgs.mautrix-googlechat

Matrix-Google Chat puppeting bridge

  • nixos-unstable -
    • nixos-unstable-small 0.5.2
  • nixos-26.05 -
    • nixos-26.05-small 0.5.2

pkgs.matrix-alertmanager

Bot to receive Alertmanager webhook events and forward them to chosen rooms

  • nixos-unstable -
  • nixos-26.05 -
    • nixos-26.05-small 0.9.0

pkgs.matrix-commander-rs

CLI-based Matrix client app for sending and receiving

  • nixos-unstable -
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0

pkgs.matrix-continuwuity

Matrix homeserver written in Rust, forked from conduwuit

  • nixos-unstable -
  • nixos-26.05 -

pkgs.matrix-zulip-bridge

Matrix puppeting appservice bridge for Zulip

  • nixos-unstable -
    • nixos-unstable-small 0.4.1
  • nixos-26.05 -
    • nixos-26.05-small 0.4.1
Untriaged
Permalink CVE-2026-97326
5.5 MEDIUM
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): Low (L)
  • Vulnerable System Impact Integrity (VI): Low (L)
  • Vulnerable System Impact Availability (VA): Low (L)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Exploit Maturity (E): POC (P)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
  • Modified Vulnerable System Impact Integrity (MVI): Low (L)
  • Modified Vulnerable System Impact Availability (MVA): Low (L)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
created 3 days, 17 hours ago Activity log
  • Created suggestion 3 days, 17 hours ago
songxinjianqwe Chat chat-server ChatServer.java server-side request forgery

A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this issue is some unknown functionality of the file chat-server/src/main/java/cn/sinjinsong/chat/server/ChatServer.java of the component chat-server. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Chat
  • ==ac63d25297079eed5e4ba7e88d3b7a032637150d

Matching in nixpkgs

pkgs.chatd

Chat with your documents using local AI

  • nixos-unstable -
    • nixos-unstable-small 1.1.2
  • nixos-26.05 -
    • nixos-26.05-small 1.1.2

pkgs.kchat

Instant messaging service part of Infomaniak KSuite

  • nixos-unstable -
    • nixos-unstable-small 3.5.1
  • nixos-26.05 -
    • nixos-26.05-small 3.3.3

pkgs.nchat

Terminal-based chat client with support for Telegram and WhatsApp

  • nixos-unstable -
  • nixos-26.05 -

pkgs.aichat

Use GPT-4(V), Gemini, LocalAI, Ollama and other LLMs in the terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.chatty

XMPP and SMS messaging via libpurple and ModemManager

  • nixos-unstable -
    • nixos-unstable-small 0.8.9
  • nixos-26.05 -
    • nixos-26.05-small 0.8.9

pkgs.ttchat

Connect to a Twitch channel's chat from your terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.wechat

Messaging and calling app

  • nixos-unstable -
  • nixos-26.05 -

pkgs.weechat

Fast, light and extensible chat client

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ssh-chat

Chat over SSH

  • nixos-unstable -
  • nixos-26.05 -

pkgs.chatblade

CLI Swiss Army Knife for ChatGPT

  • nixos-unstable -
    • nixos-unstable-small 0.7.0
  • nixos-26.05 -
    • nixos-26.05-small 0.7.0

pkgs.librechat

Open-source app for all your AI conversations, fully customizable and compatible with any AI provider

  • nixos-unstable -
    • nixos-unstable-small 0.8.7
  • nixos-26.05 -
    • nixos-26.05-small 0.8.6

pkgs.aider-chat

AI pair programming in your terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.fluffychat

Chat with your friends (matrix client)

  • nixos-unstable -
    • nixos-unstable-small 2.9.4
  • nixos-26.05 -
    • nixos-26.05-small 2.6.0

pkgs.chatgpt-cli

Interactive CLI for ChatGPT

  • nixos-unstable -
    • nixos-unstable-small 1.3.5
  • nixos-26.05 -
    • nixos-26.05-small 1.3.5

pkgs.chatterino2

Chat client for Twitch chat

  • nixos-unstable -
    • nixos-unstable-small 2.5.5
  • nixos-26.05 -
    • nixos-26.05-small 2.5.5

pkgs.chatterino7

Chat client for Twitch chat

  • nixos-unstable -
    • nixos-unstable-small 7.5.5
  • nixos-26.05 -
    • nixos-26.05-small 7.5.5

pkgs.commet-chat

Client for Matrix focused on providing a feature rich experience while maintaining a simple interface

pkgs.libdeltachat

Delta Chat Rust Core library

  • nixos-unstable -
  • nixos-26.05 -

pkgs.libgnunetchat

Library for secure, decentralized chat using GNUnet network services

  • nixos-unstable -
    • nixos-unstable-small 0.6.1
  • nixos-26.05 -
    • nixos-26.05-small 0.6.1

pkgs.arcanechat-tui

Lightweight Delta Chat client

  • nixos-unstable -
  • nixos-26.05 -

pkgs.fluffychat-web

Chat with your friends (matrix client)

  • nixos-unstable -
    • nixos-unstable-small 2.9.4
  • nixos-26.05 -
    • nixos-26.05-small 2.6.0

pkgs.pkgsRocm.chatd

Chat with your documents using local AI

  • nixos-unstable -
    • nixos-unstable-small 1.1.2
  • nixos-26.05 -
    • nixos-26.05-small 1.1.2

pkgs.aider-chat-full

AI pair programming in your terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.chatzone-desktop

Ozon corporate messenger

  • nixos-unstable -
    • nixos-unstable-small 5.7.0
  • nixos-26.05 -
    • nixos-26.05-small 5.7.0

pkgs.chatgpt-shell-cli

Simple shell script to use OpenAI's ChatGPT and DALL-E from the terminal. No Python or JS required

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

pkgs.deltachat-desktop

Email-based instant messaging for Desktop

  • nixos-unstable -
  • nixos-26.05 -

pkgs.weechat-unwrapped

Fast, light and extensible chat client

  • nixos-unstable -
  • nixos-26.05 -

pkgs.mautrix-googlechat

Matrix-Google Chat puppeting bridge

  • nixos-unstable -
    • nixos-unstable-small 0.5.2
  • nixos-26.05 -
    • nixos-26.05-small 0.5.2

pkgs.kdePackages.neochat

A client for matrix, the decentralized communication protocol

  • nixos-unstable -
  • nixos-26.05 -

pkgs.weechatScripts.edit

This simple weechat plugin allows you to compose messages in your $EDITOR

  • nixos-unstable -
    • nixos-unstable-small 1.0.2
  • nixos-26.05 -
    • nixos-26.05-small 1.0.2

pkgs.deltachat-rpc-server

Delta Chat RPC server exposing JSON-RPC core API over standard I/O

  • nixos-unstable -
  • nixos-26.05 -

pkgs.reticulum-group-chat

Pure-Go LXMF group-chat hub for the Reticulum network — a single static binary that relays many-to-many encrypted text chat over LoRa, TCP/IP, and mixed meshes. No Python, no third-party RNS library

  • nixos-unstable -

pkgs.weechatScripts.autosort

autosort automatically keeps your buffers sorted and grouped by server

  • nixos-unstable -
    • nixos-unstable-small 3.10
  • nixos-26.05 -
    • nixos-26.05-small 3.10

pkgs.python313Packages.fschat

Open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python314Packages.fschat

Open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python313Packages.chatlas

Friendly guide to building LLM chat apps in Python with less effort and more clarity

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python314Packages.chatlas

Friendly guide to building LLM chat apps in Python with less effort and more clarity

  • nixos-unstable -
  • nixos-26.05 -

pkgs.weechatScripts.weechat-go

WeeChat script to quickly jump to different buffers

  • nixos-unstable -
    • nixos-unstable-small 2.7
  • nixos-26.05 -
    • nixos-26.05-small 2.7

pkgs.weechatScripts.weechat-autosort

Autosort is a weechat script to automatically or manually keep your buffers sorted

  • nixos-unstable -
    • nixos-unstable-small 3.9
  • nixos-26.05 -
    • nixos-26.05-small 3.9

pkgs.python313Packages.chat-downloader

Simple tool used to retrieve chat messages from livestreams, videos, clips and past broadcasts

  • nixos-unstable -
    • nixos-unstable-small 0.2.8
  • nixos-26.05 -
    • nixos-26.05-small 0.2.8

pkgs.python314Packages.chat-downloader

Simple tool used to retrieve chat messages from livestreams, videos, clips and past broadcasts

  • nixos-unstable -
    • nixos-unstable-small 0.2.8
  • nixos-26.05 -
    • nixos-26.05-small 0.2.8

pkgs.gnomeExtensions.penguin-ai-chatbot

A GNOME Shell extension that provides a chatbot interface using various LLM providers, including Anthropic, OpenAI, Gemini, and OpenRouter. Features include multiple provider support, customizable models, chat history, customizable appearance, a keyboard shortcut, web search, location (by using the extension, you consent to sharing your location with OpenRouter for AI Tools) and copy-to-clipboard functionality.

  • nixos-unstable -
    • nixos-unstable-small 28
  • nixos-26.05 -
    • nixos-26.05-small 25

Package maintainers