Suggestions search

All statuses

Filter by:

With package: python312Packages.steamworkspy

Found 3 matching suggestions

View:

Compact

Detailed

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-9038

8.6 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): High (H)
Subsequent System Impact Integrity (SI): High (H)
Subsequent System Impact Availability (SA): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): High (H)
Modified Subsequent System Impact Integrity (MSI): High (H)
Modified Subsequent System Impact Availability (MSA): High (H)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

Stack-based buffer overflow in XCharge C6

A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to supply message fields that exceed expected bounds. Because the input is not sufficiently validated, memory corruption may occur, which can lead to execution of unauthorized code with elevated privileges.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 government-resource

Affected products

<May_22_2026

Matching in nixpkgs

pkgs.cc65

C compiler for processors of 6502 family

nixos-unstable 2.19
- nixpkgs-unstable 2.19
- nixos-unstable-small 2.19

pkgs.sc68

Atari ST and Amiga music player

nixos-unstable 2.2.1-unstable-2024-09-09
- nixpkgs-unstable 2.2.1-unstable-2024-09-09
- nixos-unstable-small 2.2.1-unstable-2024-09-09

pkgs.ndisc6

Small collection of useful tools for IPv6 networking

nixos-unstable 1.0.4
- nixpkgs-unstable 1.0.4
- nixos-unstable-small 1.0.4

pkgs.libiec61850

Open-source library for the IEC 61850 protocols

nixos-unstable 1.6.1
- nixpkgs-unstable 1.6.1
- nixos-unstable-small 1.6.1

pkgs.libiec61883

None

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.0

pkgs.c64-debugger

Commodore 64, Atari XL/XE and NES code and memory debugger that works in real time

nixos-unstable 0.64.58.6
- nixpkgs-unstable 0.64.58.6
- nixos-unstable-small 0.64.58.6

pkgs.crc64fast-nvme

SIMD accelerated carryless-multiplication CRC-64/NVME checksum computation (based on Intel's PCLMULQDQ paper)

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.0

pkgs.replay-node-cli

Time Travel Debugger for Web Development - Node Command Line

nixos-unstable 0.1.7-20220726-bac6d66b5ca1-5b966f2f136c
- nixpkgs-unstable 0.1.7-20220726-bac6d66b5ca1-5b966f2f136c
- nixos-unstable-small 0.1.7-20220726-bac6d66b5ca1-5b966f2f136c

pkgs.vimpager-latest

Use Vim as PAGER

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.akkuPackages.oleg

Libraries written by Oleg ported to Chez Scheme

nixos-unstable 0.0.0-akku.2.c682687
- nixpkgs-unstable 0.0.0-akku.2.c682687
- nixos-unstable-small 0.0.0-akku.2.c682687

pkgs.ibus-engines.bamboo

Vietnamese IME for IBus

nixos-unstable 0.8.4-rc6
- nixpkgs-unstable 0.8.4-rc6
- nixos-unstable-small 0.8.4-rc6

pkgs.sbclPackages.iterate

None

pkgs.coreboot-toolchain.ppc64

Coreboot toolchain for ppc64 targets

nixos-unstable 26.03
- nixpkgs-unstable 26.03
- nixos-unstable-small 26.03

pkgs.akkuPackages.chez-sockets

Full Blown, portable, and extensible sockets library for Chez Scheme

nixos-unstable 0.0.0-akku.13.c3fc663.1
- nixpkgs-unstable 0.0.0-akku.13.c3fc663.1
- nixos-unstable-small 0.0.0-akku.13.c3fc663.1

pkgs.python312Packages.rfc6555

None

pkgs.python313Packages.rfc6555

Python implementation of the Happy Eyeballs Algorithm

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

pkgs.python314Packages.rfc6555

Python implementation of the Happy Eyeballs Algorithm

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

pkgs.dhallPackages.dhall-kubernetes

None

nixos-unstable 3.0.0-3c6d09a9409977cdde58a091d76a6d20509ca4b0
- nixpkgs-unstable 3.0.0-3c6d09a9409977cdde58a091d76a6d20509ca4b0
- nixos-unstable-small 3.0.0-3c6d09a9409977cdde58a091d76a6d20509ca4b0

pkgs.python312Packages.steamworkspy

None

pkgs.python313Packages.steamworkspy

Python API system for Valve's Steamworks

nixos-unstable 26780de81b8c14d48fe8d757c642086f2af2a66b
- nixpkgs-unstable 26780de81b8c14d48fe8d757c642086f2af2a66b
- nixos-unstable-small 26780de81b8c14d48fe8d757c642086f2af2a66b

pkgs.python314Packages.steamworkspy

Python API system for Valve's Steamworks

nixos-unstable 26780de81b8c14d48fe8d757c642086f2af2a66b
- nixpkgs-unstable 26780de81b8c14d48fe8d757c642086f2af2a66b
- nixos-unstable-small 26780de81b8c14d48fe8d757c642086f2af2a66b

pkgs.vimPlugins.nvim-treesitter-parsers.pod

None

nixos-unstable 0.0.0+rev=57c606a
- nixpkgs-unstable 0.0.0+rev=57c606a
- nixos-unstable-small 0.0.0+rev=57c606a

pkgs.vimPlugins.nvim-treesitter-parsers.vhs

None

nixos-unstable 0.0.0+rev=0c6fae9
- nixpkgs-unstable 0.0.0+rev=0c6fae9
- nixos-unstable-small 0.0.0+rev=0c6fae9

pkgs.vimPlugins.nvim-treesitter-parsers.rasi

None

nixos-unstable 0.0.0+rev=e735c68
- nixpkgs-unstable 0.0.0+rev=e735c68
- nixos-unstable-small 0.0.0+rev=e735c68

pkgs.vimPlugins.nvim-treesitter-parsers.scss

None

nixos-unstable 0.0.0+rev=c478c68
- nixpkgs-unstable 0.0.0+rev=c478c68
- nixos-unstable-small 0.0.0+rev=c478c68

pkgs.vimPlugins.nvim-treesitter-parsers.yuck

None

nixos-unstable 0.0.0+rev=6c60112
- nixpkgs-unstable 0.0.0+rev=6c60112
- nixos-unstable-small 0.0.0+rev=6c60112

pkgs.vimPlugins.nvim-treesitter-parsers.templ

None

nixos-unstable 0.0.0+rev=1c6db04
- nixpkgs-unstable 0.0.0+rev=1c6db04
- nixos-unstable-small 0.0.0+rev=1c6db04

pkgs.vimPlugins.nvim-treesitter-parsers.scheme

None

nixos-unstable 0.0.0+rev=c6cb7c7
- nixpkgs-unstable 0.0.0+rev=c6cb7c7
- nixos-unstable-small 0.0.0+rev=c6cb7c7

pkgs.androidenv.androidPkgs.all.packages.build-tools.v30_0_3

Android SDK tools, packaged in Nixpkgs

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.androidenv.androidPkgs.all.packages.build-tools.v32_0_0

Android SDK tools, packaged in Nixpkgs

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@numinit Morgan Jones <me+nixpkgs@numin.it>
@RossComputerGuy Tristan Ross <tristan.ross@midstall.com>
@hadilq Hadi Lashkari Ghouchani <hadilq.dev@gmail.com>
@johnrtitor Masum Reza <masumrezarock100@gmail.com>
@adrian-gierakowski Adrian Gierakowski <adrian.gierakowski@gmail.com>
@Detegr Antti Keränen <detegr@rbx.email>
@felixsinger Felix Singer <felixsinger@posteo.net>
@jmbaur Jared Baur <jaredbaur@fastmail.com>
@powwu powwu <hello@powwu.sh>
@stv0g Steffen Vogel <post@steffenvogel.de>
@PJungkamp Philipp Jungkamp <philipp@jungkamp.dev>
@weirdrock weirdrock <weirdrock@riseup.net>
@phryneas Lenz Weber <mail@lenzw.de>
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-9039

8.6 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): High (H)
Subsequent System Impact Integrity (SI): High (H)
Subsequent System Impact Availability (SA): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): High (H)
Modified Subsequent System Impact Integrity (MSI): High (H)
Modified Subsequent System Impact Availability (MSA): High (H)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

Initialization of a resource with an insecure default in XCharge C6

A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the charging connector, and it accepts a default administrative credential. A malicious device physically connected to the charging interface could leverage this misconfiguration to obtain full administrative access.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 government-resource

Affected products

<May_22_2026

Matching in nixpkgs

pkgs.cc65

C compiler for processors of 6502 family

nixos-unstable 2.19
- nixpkgs-unstable 2.19
- nixos-unstable-small 2.19

pkgs.sc68

Atari ST and Amiga music player

nixos-unstable 2.2.1-unstable-2024-09-09
- nixpkgs-unstable 2.2.1-unstable-2024-09-09
- nixos-unstable-small 2.2.1-unstable-2024-09-09

pkgs.ndisc6

Small collection of useful tools for IPv6 networking

nixos-unstable 1.0.4
- nixpkgs-unstable 1.0.4
- nixos-unstable-small 1.0.4

pkgs.libiec61850

Open-source library for the IEC 61850 protocols

nixos-unstable 1.6.1
- nixpkgs-unstable 1.6.1
- nixos-unstable-small 1.6.1

pkgs.libiec61883

None

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.0

pkgs.c64-debugger

Commodore 64, Atari XL/XE and NES code and memory debugger that works in real time

nixos-unstable 0.64.58.6
- nixpkgs-unstable 0.64.58.6
- nixos-unstable-small 0.64.58.6

pkgs.crc64fast-nvme

SIMD accelerated carryless-multiplication CRC-64/NVME checksum computation (based on Intel's PCLMULQDQ paper)

nixos-unstable 1.2.0
- nixpkgs-unstable 1.2.0
- nixos-unstable-small 1.2.0

pkgs.replay-node-cli

Time Travel Debugger for Web Development - Node Command Line

nixos-unstable 0.1.7-20220726-bac6d66b5ca1-5b966f2f136c
- nixpkgs-unstable 0.1.7-20220726-bac6d66b5ca1-5b966f2f136c
- nixos-unstable-small 0.1.7-20220726-bac6d66b5ca1-5b966f2f136c

pkgs.vimpager-latest

Use Vim as PAGER

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.akkuPackages.oleg

Libraries written by Oleg ported to Chez Scheme

nixos-unstable 0.0.0-akku.2.c682687
- nixpkgs-unstable 0.0.0-akku.2.c682687
- nixos-unstable-small 0.0.0-akku.2.c682687

pkgs.ibus-engines.bamboo

Vietnamese IME for IBus

nixos-unstable 0.8.4-rc6
- nixpkgs-unstable 0.8.4-rc6
- nixos-unstable-small 0.8.4-rc6

pkgs.sbclPackages.iterate

None

pkgs.coreboot-toolchain.ppc64

Coreboot toolchain for ppc64 targets

nixos-unstable 26.03
- nixpkgs-unstable 26.03
- nixos-unstable-small 26.03

pkgs.akkuPackages.chez-sockets

Full Blown, portable, and extensible sockets library for Chez Scheme

nixos-unstable 0.0.0-akku.13.c3fc663.1
- nixpkgs-unstable 0.0.0-akku.13.c3fc663.1
- nixos-unstable-small 0.0.0-akku.13.c3fc663.1

pkgs.python312Packages.rfc6555

None

pkgs.python313Packages.rfc6555

Python implementation of the Happy Eyeballs Algorithm

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

pkgs.python314Packages.rfc6555

Python implementation of the Happy Eyeballs Algorithm

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

pkgs.dhallPackages.dhall-kubernetes

None

nixos-unstable 3.0.0-3c6d09a9409977cdde58a091d76a6d20509ca4b0
- nixpkgs-unstable 3.0.0-3c6d09a9409977cdde58a091d76a6d20509ca4b0
- nixos-unstable-small 3.0.0-3c6d09a9409977cdde58a091d76a6d20509ca4b0

pkgs.python312Packages.steamworkspy

None

pkgs.python313Packages.steamworkspy

Python API system for Valve's Steamworks

nixos-unstable 26780de81b8c14d48fe8d757c642086f2af2a66b
- nixpkgs-unstable 26780de81b8c14d48fe8d757c642086f2af2a66b
- nixos-unstable-small 26780de81b8c14d48fe8d757c642086f2af2a66b

pkgs.python314Packages.steamworkspy

Python API system for Valve's Steamworks

nixos-unstable 26780de81b8c14d48fe8d757c642086f2af2a66b
- nixpkgs-unstable 26780de81b8c14d48fe8d757c642086f2af2a66b
- nixos-unstable-small 26780de81b8c14d48fe8d757c642086f2af2a66b

pkgs.vimPlugins.nvim-treesitter-parsers.pod

None

nixos-unstable 0.0.0+rev=57c606a
- nixpkgs-unstable 0.0.0+rev=57c606a
- nixos-unstable-small 0.0.0+rev=57c606a

pkgs.vimPlugins.nvim-treesitter-parsers.vhs

None

nixos-unstable 0.0.0+rev=0c6fae9
- nixpkgs-unstable 0.0.0+rev=0c6fae9
- nixos-unstable-small 0.0.0+rev=0c6fae9

pkgs.vimPlugins.nvim-treesitter-parsers.rasi

None

nixos-unstable 0.0.0+rev=e735c68
- nixpkgs-unstable 0.0.0+rev=e735c68
- nixos-unstable-small 0.0.0+rev=e735c68

pkgs.vimPlugins.nvim-treesitter-parsers.scss

None

nixos-unstable 0.0.0+rev=c478c68
- nixpkgs-unstable 0.0.0+rev=c478c68
- nixos-unstable-small 0.0.0+rev=c478c68

pkgs.vimPlugins.nvim-treesitter-parsers.yuck

None

nixos-unstable 0.0.0+rev=6c60112
- nixpkgs-unstable 0.0.0+rev=6c60112
- nixos-unstable-small 0.0.0+rev=6c60112

pkgs.vimPlugins.nvim-treesitter-parsers.templ

None

nixos-unstable 0.0.0+rev=1c6db04
- nixpkgs-unstable 0.0.0+rev=1c6db04
- nixos-unstable-small 0.0.0+rev=1c6db04

pkgs.vimPlugins.nvim-treesitter-parsers.scheme

None

nixos-unstable 0.0.0+rev=c6cb7c7
- nixpkgs-unstable 0.0.0+rev=c6cb7c7
- nixos-unstable-small 0.0.0+rev=c6cb7c7

pkgs.androidenv.androidPkgs.all.packages.build-tools.v30_0_3

Android SDK tools, packaged in Nixpkgs

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.androidenv.androidPkgs.all.packages.build-tools.v32_0_0

Android SDK tools, packaged in Nixpkgs

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Package maintainers

@numinit Morgan Jones <me+nixpkgs@numin.it>
@RossComputerGuy Tristan Ross <tristan.ross@midstall.com>
@hadilq Hadi Lashkari Ghouchani <hadilq.dev@gmail.com>
@johnrtitor Masum Reza <masumrezarock100@gmail.com>
@adrian-gierakowski Adrian Gierakowski <adrian.gierakowski@gmail.com>
@Detegr Antti Keränen <detegr@rbx.email>
@felixsinger Felix Singer <felixsinger@posteo.net>
@jmbaur Jared Baur <jaredbaur@fastmail.com>
@powwu powwu <hello@powwu.sh>
@stv0g Steffen Vogel <post@steffenvogel.de>
@PJungkamp Philipp Jungkamp <philipp@jungkamp.dev>
@weirdrock weirdrock <weirdrock@riseup.net>
@phryneas Lenz Weber <mail@lenzw.de>
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-9037

9.3 CRITICAL

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 3 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 3 weeks ago

Download of code without integrity check in XCharge C6

A firmware update mechanism in the affected charging controller fails to validate the authenticity of firmware packages delivered through the device's management interface. Because cryptographic signatures are not verified, an attacker with the ability to interfere with or impersonate the management channel could cause the device to install an unauthorized firmware package. This condition could allow execution of unauthorized code with high privileges on the device.