Suggestions search

All statuses

Filter by:

With package: python312Packages.types-aiobotocore-appsync

Found 2 matching suggestions

View:

Compact

Detailed

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-22768

7.3 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse dismissed (not in Nixpkgs) 5 months, 1 week ago

Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for …

Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

References

https://www.dell.com/support/kbdoc/en-us/000446965/dsa-2026-163-security-update… vendor-advisory

Affected products

AppSync

<4.6.1.0 or later

Matching in nixpkgs

pkgs.haskellPackages.amazonka-appsync

Amazon AppSync SDK

nixos-unstable 2.0-unstable-2025-04-16
- nixpkgs-unstable 2.0-unstable-2025-04-16
- nixos-unstable-small 2.0-unstable-2025-04-16

pkgs.python312Packages.mypy-boto3-appsync

None

pkgs.python313Packages.mypy-boto3-appsync

Type annotations for boto3 appsync

nixos-unstable 1.42.6
- nixpkgs-unstable 1.42.6
- nixos-unstable-small 1.42.6

pkgs.python314Packages.mypy-boto3-appsync

Type annotations for boto3 appsync

nixos-unstable 1.42.6
- nixpkgs-unstable 1.42.6
- nixos-unstable-small 1.42.6

pkgs.python312Packages.types-aiobotocore-appsync

None

pkgs.python313Packages.types-aiobotocore-appsync

Type annotations for aiobotocore appsync

nixos-unstable 3.2.1
- nixpkgs-unstable 3.2.1
- nixos-unstable-small 3.2.1

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-22767

7.3 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse dismissed (not in Nixpkgs) 5 months, 1 week ago

Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) …

Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.