Suggestions search

Untriaged

Filter by:

With package: python312Packages.datafusion

Found 3 matching suggestions

View:

Compact

Detailed

Permalink CVE-2026-0533

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 4 months ago Activity log

Created suggestion 4 months ago

Stored XSS in Fusion desktop when attempting to delete a file

A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

References

Affected products

Fusion

<2606.1.22
<2606.1.21

Matching in nixpkgs

pkgs.datafusion-cli

cli for Apache Arrow DataFusion

nixos-unstable 50.3.0
- nixpkgs-unstable 50.3.0
- nixos-unstable-small 50.3.0

pkgs.lxgw-fusionkai

Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One

nixos-unstable 24.134
- nixpkgs-unstable 24.134
- nixos-unstable-small 24.134

pkgs.fusionInventory

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6

pkgs.finalfusion-utils

Utility for converting, quantizing, and querying word embeddings

nixos-unstable 0.14.1
- nixpkgs-unstable 0.14.1
- nixos-unstable-small 0.14.1

pkgs.python312Packages.datafusion

Extensible query execution framework

nixos-unstable 50.0.0
- nixpkgs-unstable 50.0.0
- nixos-unstable-small 50.0.0

pkgs.python313Packages.datafusion

Extensible query execution framework

nixos-unstable 50.0.0
- nixpkgs-unstable 50.0.0
- nixos-unstable-small 50.0.0

pkgs.haskellPackages.fusion-plugin

GHC plugin to make stream fusion more predictable

nixos-unstable 0.2.7
- nixpkgs-unstable 0.2.7
- nixos-unstable-small 0.2.7

pkgs.python312Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python312Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.python313Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python313Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.haskellPackages.gogol-datafusion

Google Cloud Data Fusion SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0

pkgs.haskellPackages.list-fusion-probe

testing list fusion for success

pkgs.haskellPackages.gogol-fusiontables

Google Fusion Tables SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0

pkgs.haskellPackages.fusion-plugin-types

Types for the fusion-plugin package

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

pkgs.pkgsRocm.python3Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.vimPlugins.nvim-treesitter-parsers.fusion

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@happysalada Raphael Megzari <raphael@megzari.com>
@phile314 Philipp Hausmann <nix@314.ch>
@hellodword hellodword
@cpcloud Phillip Cloud
@Mic92 Jörg Thalheim <joerg@thalheim.io>

Permalink CVE-2026-0534

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 4 months ago Activity log

Created suggestion 4 months ago

Stored XSS in the value of a part attribute

A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.

References

Affected products

Fusion

<2606.1.22
<2606.1.21

Matching in nixpkgs

pkgs.datafusion-cli

cli for Apache Arrow DataFusion

nixos-unstable 50.3.0
- nixpkgs-unstable 50.3.0
- nixos-unstable-small 50.3.0

pkgs.lxgw-fusionkai

Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One

nixos-unstable 24.134
- nixpkgs-unstable 24.134
- nixos-unstable-small 24.134

pkgs.fusionInventory

FusionInventory unified Agent for UNIX, Linux, Windows and MacOSX

nixos-unstable 2.6
- nixpkgs-unstable 2.6
- nixos-unstable-small 2.6

pkgs.finalfusion-utils

Utility for converting, quantizing, and querying word embeddings

nixos-unstable 0.14.1
- nixpkgs-unstable 0.14.1
- nixos-unstable-small 0.14.1

pkgs.python312Packages.datafusion

Extensible query execution framework

nixos-unstable 50.0.0
- nixpkgs-unstable 50.0.0
- nixos-unstable-small 50.0.0

pkgs.python313Packages.datafusion

Extensible query execution framework

nixos-unstable 50.0.0
- nixpkgs-unstable 50.0.0
- nixos-unstable-small 50.0.0

pkgs.haskellPackages.fusion-plugin

GHC plugin to make stream fusion more predictable

nixos-unstable 0.2.7
- nixpkgs-unstable 0.2.7
- nixos-unstable-small 0.2.7

pkgs.python312Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python312Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.python313Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python313Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.haskellPackages.gogol-datafusion

Google Cloud Data Fusion SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0

pkgs.haskellPackages.list-fusion-probe

testing list fusion for success

pkgs.haskellPackages.gogol-fusiontables

Google Fusion Tables SDK

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0

pkgs.haskellPackages.fusion-plugin-types

Types for the fusion-plugin package

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

pkgs.pkgsRocm.python3Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.vimPlugins.nvim-treesitter-parsers.fusion

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@happysalada Raphael Megzari <raphael@megzari.com>
@phile314 Philipp Hausmann <nix@314.ch>
@hellodword hellodword
@cpcloud Phillip Cloud
@Mic92 Jörg Thalheim <joerg@thalheim.io>

Permalink CVE-2026-0535

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 4 months ago Activity log

Created suggestion 4 months ago

Stored XSS in Electronic Library Component Description

A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.