Nixpkgs security tracker

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-65906

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 3 days, 16 hours ago
@LeSuisse dismissed (not in Nixpkgs) 3 days, 2 hours ago

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin …

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1.2, 2025.11.6

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-65907

9.1 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 3 days, 2 hours ago by @LeSuisse Activity log

Created suggestion 3 days, 16 hours ago
@LeSuisse dismissed (not in Nixpkgs) 3 days, 2 hours ago

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git …

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1.2, 2025.11.6

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-59793

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 1 week, 5 days ago Activity log

Created suggestion 1 week, 5 days ago

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible …

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1.2

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-59795

8.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 1 week, 5 days ago Activity log

Created suggestion 1 week, 5 days ago

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent …

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1.2

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-59794

7.3 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 1 week, 5 days ago Activity log

Created suggestion 1 week, 5 days ago

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud …

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1.2

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-59796

8.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 1 week, 5 days ago Activity log

Created suggestion 1 week, 5 days ago

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due …

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1.2

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33
nixos-26.05 1.33
- nixos-26.05-small 1.33
- nixpkgs-26.05-darwin 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-49373

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

created 1 month, 3 weeks ago Activity log

Created suggestion 1 month, 3 weeks ago

In JetBrains TeamCity before 2026.1 remote code execution was possible …

In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

None

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-49374

7.6 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

created 1 month, 3 weeks ago Activity log

Created suggestion 1 month, 3 weeks ago

In JetBrains TeamCity before 2026.1 improper permission checks exposed build …

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

None

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-49377

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 3 weeks ago Activity log

Created suggestion 1 month, 3 weeks ago

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via …

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2025.11.2

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

None

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-49372

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 3 weeks ago Activity log

Created suggestion 1 month, 3 weeks ago

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build …

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

TeamCity

<2026.1, 2025.11.5

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

None

pkgs.python313Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

pkgs.python314Packages.teamcity-messages

Python unit test reporting to TeamCity

nixos-unstable 1.33
- nixpkgs-unstable 1.33
- nixos-unstable-small 1.33

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.python312Packages.teamcity-messages

pkgs.python313Packages.teamcity-messages

pkgs.python314Packages.teamcity-messages

Package maintainers