Nixpkgs security tracker

Login with GitHub

Suggestions search

Dismissed
Filter by:
With package: tests.home-assistant-component-tests.cloudflare

Found 1 matching suggestions

View:
Compact
Detailed
Permalink CVE-2026-30230
updated 4 months ago by @mweinelt Activity log
  • Created suggestion 4 months ago
  • @mweinelt dismissed 4 months ago
Flare: Password‑Protected Thumbnail Bypass

Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the thumbnail endpoint does not validate the password for password‑protected files. It checks ownership/admin for private files but skips password verification, allowing thumbnail access without the password. This issue has been patched in version 1.7.2.

Affected products

Flare
  • ==< 1.7.2

Matching in nixpkgs

pkgs.flare

Fantasy action RPG using the FLARE engine

  • nixos-unstable 1.14
    • nixpkgs-unstable 1.14
    • nixos-unstable-small 1.14

pkgs.flarectl

CLI application for interacting with a Cloudflare account

pkgs.photoflare

Cross-platform image editor with a powerful features and a very friendly graphical user interface

pkgs.cloudflared

Client for various Cloudflare services, including Tunnel, Access, and DNS over HTTPS

pkgs.flare-floss

Automatically extract obfuscated strings from malware

pkgs.gotlsaflare

Update TLSA DANE records on cloudflare from x509 certificates

pkgs.flaresolverr

Proxy server to bypass Cloudflare protection

Package maintainers

Not in nixpkgs