Nixpkgs security tracker
5.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): Low (L)
- Integrity (I): None (N)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): Low (L)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
WordPress Team plugin <= 6.0.0 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in Team <= 6.0.0 versions.
References
Affected products
- =<6.0.0
Matching in nixpkgs
pkgs.steam
Digital distribution platform
pkgs.teams
Microsoft Teams
-
nixos-unstable -
- nixos-unstable-small 25255.703.3981.5698
-
nixos-26.05 -
- nixos-26.05-small 25255.703.3981.5698
pkgs.git-team
Command line interface for managing and enhancing git commit messages with co-authors
pkgs.steamcmd
Steam command-line tools
pkgs.teamocil
Simple tool used to automatically create windows and panes in tmux with YAML files
pkgs.teamtype
Real-time co-editing of local text files
pkgs.ethersync
Real-time co-editing of local text files
pkgs.steam-acf
Tool to convert Steam .acf files to JSON
pkgs.steam-run
Run commands in the same FHS environment that is used for Steam
pkgs.steam-tui
Rust TUI client for steamcmd
pkgs.steamback
Decky plugin to add versioned save-game snapshots to Steam-cloud enabled games
pkgs.steampipe
Dynamically query your cloud, code, logs & more with SQL
pkgs.steamworks
Configuration information distributed over LDAP in near realtime
pkgs.teamviewer
Desktop sharing application, providing remote support and online meetings
pkgs.adwsteamgtk
Simple Gtk wrapper for Adwaita-for-Steam
pkgs.bitlbee-steam
Steam protocol plugin for BitlBee
pkgs.ArchiSteamFarm
Application with primary purpose of idling Steam cards from multiple accounts simultaneously
pkgs.archisteamfarm
Application with primary purpose of idling Steam cards from multiple accounts simultaneously
pkgs.steam-run-free
Run commands in the same FHS environment that is used for Steam
pkgs.steamguard-cli
Linux utility for generating 2FA codes for Steam and managing Steam trade confirmations
pkgs.steam-play-none
Steam Play Compatibility Tool to run games as-is (This is intended for use in the `programs.steam.extraCompatPackages` option only.)
-
nixos-unstable -
- nixos-unstable-small 0-unstable-2022-12-15
-
nixos-26.05 -
- nixos-26.05-small 0-unstable-2022-12-15
pkgs.steam-unwrapped
Digital distribution platform
pkgs.teams-for-linux
Unofficial Microsoft Teams client for Linux
pkgs.teamspeak_server
TeamSpeak voice communication server
pkgs.steam-art-manager
A tool to manage and change Steam library artwork
pkgs.steam-rom-manager
App for managing ROMs in Steam
pkgs.steamtinkerlaunch
Linux wrapper tool for use with the Steam client for custom launch options and 3rd party programs
-
nixos-unstable -
- nixos-unstable-small 12.12-unstable-2025-07-14
-
nixos-26.05 -
- nixos-26.05-small 12.12-unstable-2025-07-14
pkgs.teamspeak6-client
TeamSpeak voice communication tool (beta version)
-
nixos-unstable -
- nixos-unstable-small 6.0.0-beta4.1
-
nixos-26.05 -
- nixos-26.05-small 6.0.0-beta4
pkgs.steamvr-linux-fixes
Vulkan layer that patches SteamVR vrcompositor for wired HMDs
-
nixos-unstable -
- nixos-unstable-small 0.1.4
pkgs.vimPlugins.teamtype
Real-time co-editing of local text files
pkgs.steam-lancache-prefill
Automatically fills a Lancache with games from Steam
pkgs.python313Packages.steam
Python package for interacting with Steam
pkgs.python314Packages.steam
Python package for interacting with Steam
pkgs.steam-devices-udev-rules
Udev rules list for gaming devices
-
nixos-unstable -
- nixos-unstable-small 1.0.0.61-unstable-2026-06-25
-
nixos-26.05 -
- nixos-26.05-small 1.0.0.61-unstable-2026-06-25
pkgs.python313Packages.steampy
Steam trading library
pkgs.python314Packages.steampy
Steam trading library
pkgs.kodiPackages.steam-library
View your entire Steam library right from Kodi
pkgs.python313Packages.steamodd
High level Steam API implementation with low level reusable core
pkgs.python314Packages.steamodd
High level Steam API implementation with low level reusable core
pkgs.kodiPackages.steam-launcher
Launch Steam in Big Picture Mode from Kodi
pkgs.python313Packages.pymsteams
None
-
nixos-26.05 -
- nixos-26.05-small 0.2.5
pkgs.python313Packages.steamloop
Local control for choochoo based thermostats
pkgs.python314Packages.pymsteams
None
-
nixos-26.05 -
- nixos-26.05-small 0.2.5
pkgs.python314Packages.steamloop
Local control for choochoo based thermostats
pkgs.gnomeExtensions.add-to-steam
Add executables to steam without having to open, or restart steam; Just like SteamOS.
pkgs.kodiPackages.steam-controller
Binary addon for steam controller
pkgs.python313Packages.aiosteamist
Module to control Steamist steam systems
pkgs.python314Packages.aiosteamist
Module to control Steamist steam systems
pkgs.python313Packages.steamworkspy
Python API system for Valve's Steamworks
-
nixos-unstable -
- nixos-unstable-small 26780de81b8c14d48fe8d757c642086f2af2a66b
-
nixos-26.05 -
- nixos-26.05-small 26780de81b8c14d48fe8d757c642086f2af2a66b
pkgs.python314Packages.steamworkspy
Python API system for Valve's Steamworks
-
nixos-unstable -
- nixos-unstable-small 26780de81b8c14d48fe8d757c642086f2af2a66b
-
nixos-26.05 -
- nixos-26.05-small 26780de81b8c14d48fe8d757c642086f2af2a66b
pkgs.haskellPackages.webex-teams-api
A Haskell bindings for Webex Teams API
pkgs.postgresqlPackages.pg_byteamagic
PostgreSQL extension to determinate the filetypes of bytea BLOBs
pkgs.haskellPackages.webex-teams-pipes
Pipes wrapper of Webex Teams List API
pkgs.postgresql14Packages.pg_byteamagic
PostgreSQL extension to determinate the filetypes of bytea BLOBs
pkgs.postgresql15Packages.pg_byteamagic
PostgreSQL extension to determinate the filetypes of bytea BLOBs
pkgs.postgresql16Packages.pg_byteamagic
PostgreSQL extension to determinate the filetypes of bytea BLOBs
pkgs.postgresql17Packages.pg_byteamagic
PostgreSQL extension to determinate the filetypes of bytea BLOBs
pkgs.postgresql18Packages.pg_byteamagic
PostgreSQL extension to determinate the filetypes of bytea BLOBs
pkgs.postgresql19Packages.pg_byteamagic
PostgreSQL extension to determinate the filetypes of bytea BLOBs
-
nixos-unstable -
- nixos-unstable-small 0.2.4
pkgs.haskellPackages.webex-teams-conduit
Conduit wrapper of Webex Teams List API
pkgs.python313Packages.teamcity-messages
Python unit test reporting to TeamCity
pkgs.python314Packages.teamcity-messages
Python unit test reporting to TeamCity
pkgs.vscode-extensions.teamtype.teamtype
Extension for real-time co-editing of local text files
pkgs.python313Packages.bundlewrap-teamvault
Pull secrets from TeamVault into your BundleWrap repo
pkgs.python314Packages.bundlewrap-teamvault
Pull secrets from TeamVault into your BundleWrap repo
pkgs.steampipePackages.steampipe-plugin-aws
AWS Plugin for Steampipe
pkgs.vscode-extensions.marp-team.marp-vscode
None
pkgs.steampipePackages.steampipe-plugin-azure
Azure Plugin for Steampipe
pkgs.steampipePackages.steampipe-plugin-github
GitHub Plugin for Steampipe
pkgs.vscode-extensions.visualstudioexptteam.vscodeintellicode
AI-assisted development
pkgs.vscode-extensions.visualstudioexptteam.intellicode-api-usage-examples
See relevant code examples from GitHub for over 100K different APIs right in your editor
Package maintainers
-
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
-
@reedrw Reed Williams <reedrw5601@gmail.com>
-
@alerque Caleb Maclennan <caleb@alerque.com>
-
@phanirithvij Phani Rithvij <phanirithvij2000@gmail.com>
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@eljamm Fedi Jamoussi <fedi.jamoussi@protonmail.ch>
-
@ethancedwards8 Ethan Carter Edwards <ethan@ethancedwards.com>
-
@lockejan Jan Schmitt <git@smittie.de>
-
@honnip Jung seungwoo <me@honnip.page>
-
@cpages Carles Pagès <page@ruiec.cat>
-
@aanderse Aaron Andersen <aaron@fosslib.net>
-
@minijackson Rémi Nicole <minijackson@riseup.net>
-
@peterhoeg Peter Hoeg <peter@hoeg.com>
-
@dschrempf Dominik Schrempf <dominik.schrempf@gmail.com>
-
@nvmd Sergey Kazenyuk <kazenyuk@pm.me>
-
@friedow Christian Friedow <christian@friedow.com>
-
@DutchGerman Stefan Visser <stefan.visser@apm-ecampus.de>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@weirdrock weirdrock <weirdrock@riseup.net>
-
@JamieMagee Jamie Magee <jamie.magee@gmail.com>
-
@dotlambda ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86 <nix@dotlambda.de>
-
@artur-sannikov Artur Sannikov
-
@Atemu Atemu <nixpkgs@mail.atemu.net>
-
@mkg20001 Maciej Krüger <mkg20001+nix@gmail.com>
-
@K900 Ilya K. <me@0upti.me>
-
@chisui Philipp Dargel <chisui.pd@gmail.com>
-
@adam-tj Adam Tjörnhammar
-
@yuannan Yuannan (Brandon) Lin <brandon@emergence.ltd>
-
@azuwis Zhong Jianxin <azuwis@gmail.com>
-
@rhoriguchi Ryan Horiguchi <ryan.horiguchi@gmail.com>
-
@MatthewCroughan Matthew Croughan <matt@croughan.sh>
-
@Scrumplex Sefa Eyeoglu <contact@scrumplex.net>
-
@SquarePear Jeffrey Harmon <contact@jeffreyharmon.dev>
-
@dmadisetti Dylan Madisetti <nix@madisetti.me>
-
@AngryAnt Emil "AngryAnt" Johansen <git@eej.dk>
-
@tadfisher Tad Fisher <tadfisher@gmail.com>
-
@SigmaSquadron Fernando Rodrigues <alpha@sigmasquadron.net>
-
@hardselius Martin Hardselius <martin@hardselius.dev>
-
@anthonyroussel Anthony Roussel <anthony@roussel.dev>
-
@RoGreat RoGreat <roguegreat@gmail.com>
-
@KitsuneDev Lunae V <kitsune@akitsune.dev>
-
@nicknovitski Nick Novitski <nixpkgs@nicknovitski.com>
-
@zachcoyle Zach Coyle <zach.coyle@gmail.com>
-
@tricktron Thibault Gagnaux <tgagnaux@gmail.com>
-
@muscaln Mustafa Çalışkan <muscaln@protonmail.com>
-
@qjoly Quentin JOLY <github@une-pause-cafe.fr>
-
@HarisDotParis Haris <git@haris.paris>
-
@khaneliman Austin Horstman <khaneliman12@gmail.com>
-
@chvp Charlotte Van Petegem <nixpkgs@cvpetegem.be>
-
@gepbird Gutyina Gergő <gutyina.gergo.2@gmail.com>
-
@drafolin Dråfølin <derg@drafolin.ch>
-
@jojosch Johannes Schleifenbaum <johannes@js-webcoding.de>
-
@Shados Alexei Robyn <shados@shados.net>
-
@Gerschtli Tobias Happ <tobias.happ@gmx.de>
-
@c4patino Ceferino Patino <c4patino@gmail.com>
-
@jraygauthier Raymond Gauthier <jraygauthier@gmail.com>
-
@gador Florian Brandes <florian.brandes@posteo.de>
-
@TheMaxMur Maxim Muravev <muravjev.mak@yandex.ru>