Nixpkgs security tracker
5.9 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
Server-controlled `__next` URL is not checking cross-origin
A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on Availability.
References
Affected products
- ==pyodata (pip) < 1.11.2
Matching in nixpkgs
pkgs.uctodata
Rule-based tokenizer for natural language
pkgs.quake3demodata
Demo of Quake 3 Arena, a classic first-person shooter
pkgs.libsForQt5.libiodata
Library for reading and writing simple structured data
pkgs.kdePackages.libiodata
Library for reading and writing simple structured data
pkgs.qt6Packages.libiodata
Library for reading and writing simple structured data
pkgs.python313Packages.iodata
Python library for reading, writing, and converting computational chemistry file formats and generating input files
pkgs.python314Packages.iodata
Python library for reading, writing, and converting computational chemistry file formats and generating input files
pkgs.python313Packages.microdata
Library for extracting html microdata
pkgs.python314Packages.microdata
Library for extracting html microdata
pkgs.haskellPackages.handa-geodata
Geographic and Geometric Data
pkgs.python313Packages.geodatasets
Spatial data examples
pkgs.python314Packages.geodatasets
Spatial data examples
pkgs.python313Packages.cryptodatahub
Repository of cryptography-related data
pkgs.python314Packages.cryptodatahub
Repository of cryptography-related data
pkgs.python313Packages.swisshydrodata
Python client to get data from the Swiss federal Office for Environment FEON
pkgs.python314Packages.swisshydrodata
Python client to get data from the Swiss federal Office for Environment FEON
pkgs.haskellPackages.dimensional-codata
CODATA Recommended Physical Constants with Dimensional Types
-
nixos-unstable 2014.0.0.3
- nixpkgs-unstable 2014.0.0.3
- nixos-unstable-small 2014.0.0.3
-
nixos-26.05 2014.0.0.3
- nixos-26.05-small 2014.0.0.3
- nixpkgs-26.05-darwin 2014.0.0.3
Package maintainers
-
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>
-
@phanirithvij Phani Rithvij <phanirithvij2000@gmail.com>
-
@eljamm Fedi Jamoussi <fedi.jamoussi@protonmail.ch>
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@ethancedwards8 Ethan Carter Edwards <ethan@ethancedwards.com>
-
@autra Augustin Trancart <augustin.trancart@gmail.com>
-
@willcohen Will Cohen
-
@nh2 Niklas Hambüchen <mail@nh2.me>
-
@nialov Nikolas Ovaskainen <nikolasovaskainen@gmail.com>
-
@l0b0 Victor Engmark <victor@engmark.name>
-
@imincik Ivan Mincik <ivan.mincik@gmail.com>
-
@sikmir Nikolay Korotkiy <sikmir@disroot.org>
-
@sheepforce Phillip Seeber <phillip.seeber@googlemail.com>
-
@ambroisie Bruno BELANYI <bruno.nixpkgs@belanyi.fr>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@roberth Robert Hensing <nixpkgs@roberthensing.nl>