Nixpkgs security tracker

Untriaged

Permalink CVE-2026-78132

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the …

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78123

5.9 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in …

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78126

5.9 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in …

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78131

3.7 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

strongSwan 4.2.0 through 6.0.7 has a missing release of memory …

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78134

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): Low (L)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the …

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78127

3.7 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release …

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78124

3.7 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the …

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78129

5.9 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 …

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78135

5.6 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in …

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Untriaged

Permalink CVE-2026-78130

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 3 days, 9 hours ago Activity log

Created suggestion 3 days, 9 hours ago

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in …

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

References

Affected products

strongSwan

<6.1.0

Matching in nixpkgs

pkgs.strongswan

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanNM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTNC

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.strongswanTPM

OpenSource IPsec-based VPN solution

nixos-unstable 6.0.7
- nixpkgs-unstable 6.0.7
- nixos-unstable-small 6.0.7
nixos-26.05 6.0.7
- nixos-26.05-small 6.1.0
- nixpkgs-26.05-darwin 6.0.7

pkgs.networkmanager-strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.5
- nixpkgs-unstable 1.6.5
- nixos-unstable-small 1.6.5
nixos-26.05 1.6.5
- nixos-26.05-small 1.6.5
- nixpkgs-26.05-darwin 1.6.5

Package maintainers

@NickCao Nick Cao <nickcao@nichi.co>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.strongswan

pkgs.strongswanNM

pkgs.strongswanTNC

pkgs.strongswanTPM

pkgs.networkmanager-strongswan

pkgs.networkmanager_strongswan

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.strongswan

pkgs.strongswanNM

pkgs.strongswanTNC

pkgs.strongswanTPM

pkgs.networkmanager-strongswan

pkgs.networkmanager_strongswan

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.strongswan

pkgs.strongswanNM

pkgs.strongswanTNC

pkgs.strongswanTPM

pkgs.networkmanager-strongswan

pkgs.networkmanager_strongswan

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.strongswan

pkgs.strongswanNM

pkgs.strongswanTNC

pkgs.strongswanTPM

pkgs.networkmanager-strongswan

pkgs.networkmanager_strongswan

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.strongswan

pkgs.strongswanNM

pkgs.strongswanTNC

pkgs.strongswanTPM

pkgs.networkmanager-strongswan

pkgs.networkmanager_strongswan

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.strongswan

pkgs.strongswanNM

pkgs.strongswanTNC

pkgs.strongswanTPM

pkgs.networkmanager-strongswan

pkgs.networkmanager_strongswan

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.strongswan

pkgs.strongswanNM

pkgs.strongswanTNC

pkgs.strongswanTPM

pkgs.networkmanager-strongswan

pkgs.networkmanager_strongswan

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.strongswan

pkgs.strongswanNM

pkgs.strongswanTNC

pkgs.strongswanTPM

pkgs.networkmanager-strongswan

pkgs.networkmanager_strongswan