Nixpkgs Security Tracker

Untriaged

Permalink CVE-2026-24474

created 2 weeks, 5 days ago

Dioxus Components has JavaScript injection via user-supplied IDs

Dioxus Components is a shadcn-style component library for the Dioxus app framework. Prior to commit 41e4242ecb1062d04ae42a5215363c1d9fd4e23a, `use_animated_open` formats a string for `eval` with an `id` that can be user supplied. Commit 41e4242ecb1062d04ae42a5215363c1d9fd4e23a patches the issue.

Affected products

components

==< 41e4242ecb1062d04ae42a5215363c1d9fd4e23a

Matching in nixpkgs

pkgs.lomiri.lomiri-settings-components

QML settings components for the Lomiri Desktop Environment

nixos-unstable 1.1.3
- nixpkgs-unstable 1.1.3
- nixos-unstable-small 1.1.3
nixos-25.05 1.1.2
- nixos-25.05-small 1.1.2
- nixpkgs-25.05-darwin 1.1.2

pkgs.python312Packages.dash-core-components

Dash component starter pack

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0
nixos-25.05 2.0.0
- nixos-25.05-small 2.0.0
- nixpkgs-25.05-darwin 2.0.0

pkgs.python312Packages.dash-html-components

HTML components for Dash

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0
nixos-25.05 2.0.0
- nixos-25.05-small 2.0.0
- nixpkgs-25.05-darwin 2.0.0

pkgs.python313Packages.dash-core-components

Dash component starter pack

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0
nixos-25.05 2.0.0
- nixos-25.05-small 2.0.0
- nixpkgs-25.05-darwin 2.0.0

pkgs.python313Packages.dash-html-components

HTML components for Dash

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0
nixos-25.05 2.0.0
- nixos-25.05-small 2.0.0
- nixpkgs-25.05-darwin 2.0.0

pkgs.python312Packages.connected-components-3d

Connected components on discrete and continuous multilabel 3D & 2D images

nixos-unstable 3d-3.22.0
- nixpkgs-unstable 3d-3.22.0
- nixos-unstable-small 3d-3.22.0
nixos-25.05 3d-3.22.0
- nixos-25.05-small 3d-3.22.0
- nixpkgs-25.05-darwin 3d-3.22.0

pkgs.python313Packages.connected-components-3d

Connected components on discrete and continuous multilabel 3D & 2D images

nixos-unstable 3d-3.22.0
- nixpkgs-unstable 3d-3.22.0
- nixos-unstable-small 3d-3.22.0
nixos-25.05 3d-3.22.0
- nixos-25.05-small 3d-3.22.0
- nixpkgs-25.05-darwin 3d-3.22.0

pkgs.python312Packages.dash-bootstrap-components

Bootstrap components for Plotly Dash

nixos-unstable 2.0.4
- nixpkgs-unstable 2.0.4
- nixos-unstable-small 2.0.4
nixos-25.05 2.0.2
- nixos-25.05-small 2.0.2
- nixpkgs-25.05-darwin 2.0.2

pkgs.python313Packages.dash-bootstrap-components

Bootstrap components for Plotly Dash

nixos-unstable 2.0.4
- nixpkgs-unstable 2.0.4
- nixos-unstable-small 2.0.4
nixos-25.05 2.0.2
- nixos-25.05-small 2.0.2
- nixpkgs-25.05-darwin 2.0.2

pkgs.vscode-extensions.styled-components.vscode-styled-components

Syntax highlighting and IntelliSense for styled-components

nixos-unstable 1.7.8
- nixpkgs-unstable 1.7.8
- nixos-unstable-small 1.7.8
nixos-25.05 1.7.8
- nixos-25.05-small 1.7.8
- nixpkgs-25.05-darwin 1.7.8

Package maintainers

@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>
@bcdarwin Ben Darwin <bcdarwin@gmail.com>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@antoinerg Antoine Roy-Gobeil <roygobeil.antoine@gmail.com>

Untriaged

(browse all)

Permalink CVE-2025-31049

created 4 months, 3 weeks ago

WordPress Dash <= 1.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3.

Affected products

dash

=<1.3

Matching in nixpkgs

pkgs.dash

POSIX-compliant implementation of /bin/sh that aims to be as small as possible

nixos-unstable -
- nixpkgs-unstable 0.5.12

pkgs.dasht

Search API docs offline, in terminal or browser

nixos-unstable -
- nixpkgs-unstable 2.4.0

pkgs.kdash

Simple and fast dashboard for Kubernetes

nixos-unstable -
- nixpkgs-unstable 0.6.2

pkgs.dasher

Information-efficient text-entry interface, driven by natural continuous pointing gestures

nixos-unstable -
- nixpkgs-unstable 2021-04-25

pkgs.iodash

Lightweight C++ I/O library for POSIX operation systems

nixos-unstable -
- nixpkgs-unstable 0.1.7

pkgs.wldash

Wayland launcher/dashboard

nixos-unstable -
- nixpkgs-unstable 0.3.0

pkgs.dashing

Dash Generator Script for Any HTML

nixos-unstable -
- nixpkgs-unstable 0.4.0

pkgs.docopts

Shell interpreter for docopt, the command-line interface description language

nixos-unstable -
- nixpkgs-unstable 0.6.4-with-no-mangle-double-dash

pkgs.gh-dash

Github Cli extension to display a dashboard with pull requests and issues

nixos-unstable -
- nixpkgs-unstable 4.16.2

pkgs.dashy-ui

Open source, highly customizable, easy-to-use, privacy-respecting dashboard app

nixos-unstable -
- nixpkgs-unstable 3.1.1-unstable-2025-09-12

pkgs.dash-mpd-cli

Download media content from a DASH-MPEG or DASH-WebM MPD manifest

nixos-unstable -
- nixpkgs-unstable 0.2.27

pkgs.riemann-dash

Javascript, websockets-powered dashboard for Riemann

nixos-unstable -
- nixpkgs-unstable 0.2.14

pkgs.gdb-dashboard

Modular visual interface for GDB in Python

nixos-unstable -
- nixpkgs-unstable

pkgs.helm-dashboard

Simplified way of working with Helm

nixos-unstable -
- nixpkgs-unstable 1.3.3

pkgs.xfce.xfdashboard

GNOME shell like dashboard

nixos-unstable -
- nixpkgs-unstable 1.1.0

pkgs.netbird-dashboard

NetBird Management Service Web UI Panel

nixos-unstable -
- nixpkgs-unstable 2.17.0

pkgs.homepage-dashboard

Highly customisable dashboard with Docker and service API integrations

nixos-unstable -
- nixpkgs-unstable 1.4.6

pkgs.grafana-dash-n-grab

Grafana Dash-n-Grab (gdg) -- backup and restore Grafana dashboards, datasources, and other entities

nixos-unstable -
- nixpkgs-unstable 0.8.1

pkgs.python312Packages.dash

Python framework for building analytical web applications

nixos-unstable -
- nixpkgs-unstable 3.0.4

pkgs.python313Packages.dash

Python framework for building analytical web applications

nixos-unstable -
- nixpkgs-unstable 3.0.4

pkgs.tests.writers.bin.dash

None

nixos-unstable -
- nixpkgs-unstable

pkgs.gnomeExtensions.dashbar

NOT MAINTAINED ANYMORE

nixos-unstable -
- nixpkgs-unstable 25

pkgs.python312Packages.pydash

Python utility libraries for doing stuff in a functional way

nixos-unstable -
- nixpkgs-unstable 8.0.5

pkgs.python313Packages.pydash

Python utility libraries for doing stuff in a functional way

nixos-unstable -
- nixpkgs-unstable 8.0.5

pkgs.python312Packages.dashing

Terminal dashboards for Python

nixos-unstable -
- nixpkgs-unstable 0.1.0

pkgs.python313Packages.dashing

Terminal dashboards for Python

nixos-unstable -
- nixpkgs-unstable 0.1.0

pkgs.tests.writers.simple.dash

None

nixos-unstable -
- nixpkgs-unstable

pkgs.python312Packages.mpegdash

MPEG-DASH MPD(Media Presentation Description) Parser

nixos-unstable -
- nixpkgs-unstable 0.4.0

pkgs.python313Packages.mpegdash

MPEG-DASH MPD(Media Presentation Description) Parser

nixos-unstable -
- nixpkgs-unstable 0.4.0

pkgs.gnomeExtensions.dash-to-dock

None

nixos-unstable -
- nixpkgs-unstable 100

pkgs.python312Packages.dash-table

First-Class Interactive DataTable for Dash

nixos-unstable -
- nixpkgs-unstable 5.0.0

pkgs.python313Packages.dash-table

First-Class Interactive DataTable for Dash

nixos-unstable -
- nixpkgs-unstable 5.0.0

pkgs.gnomeExtensions.dash-in-panel

Dash in top panel.

nixos-unstable -
- nixpkgs-unstable 23

pkgs.gnomeExtensions.dash-to-panel

An icon taskbar for the Gnome Shell. This extension moves the dash into the gnome main panel so that the application launchers and system tray are combined into a single panel, similar to that found in KDE Plasma and Windows 7+. A separate dock is no longer needed for easy access to running and favorited applications.