Nixpkgs security tracker

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-57694

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

updated 1 week, 4 days ago by @LeSuisse Activity log

Created suggestion 1 week, 4 days ago
@LeSuisse dismissed (not in Nixpkgs) 1 week, 4 days ago

WordPress Tutor LMS plugin <= 3.9.13 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.13.

References

https://patchstack.com/database/Wordpress/Plugin/tutor/vulnerability/wordpress-… vdb-entry

Affected products

tutor

=<3.9.13

Matching in nixpkgs

pkgs.typstPackages.tutor

Utilities to create exams

nixos-unstable 0.8.0
- nixpkgs-unstable 0.8.0
- nixos-unstable-small 0.8.0
nixos-26.05 0.8.0
- nixos-26.05-small 0.8.0
- nixpkgs-26.05-darwin 0.8.0

pkgs.typstPackages.tutor_0_3_0

Utilities to create exams

nixos-unstable 0.3.0
- nixpkgs-unstable 0.3.0
- nixos-unstable-small 0.3.0
nixos-26.05 0.3.0
- nixos-26.05-small 0.3.0
- nixpkgs-26.05-darwin 0.3.0

pkgs.typstPackages.tutor_0_4_0

Utilities to create exams

nixos-unstable 0.4.0
- nixpkgs-unstable 0.4.0
- nixos-unstable-small 0.4.0
nixos-26.05 0.4.0
- nixos-26.05-small 0.4.0
- nixpkgs-26.05-darwin 0.4.0

pkgs.typstPackages.tutor_0_6_1

Utilities to create exams

nixos-unstable 0.6.1
- nixpkgs-unstable 0.6.1
- nixos-unstable-small 0.6.1
nixos-26.05 0.6.1
- nixos-26.05-small 0.6.1
- nixpkgs-26.05-darwin 0.6.1

pkgs.typstPackages.tutor_0_7_0

Utilities to create exams

nixos-unstable 0.7.0
- nixpkgs-unstable 0.7.0
- nixos-unstable-small 0.7.0
nixos-26.05 0.7.0
- nixos-26.05-small 0.7.0
- nixpkgs-26.05-darwin 0.7.0

pkgs.typstPackages.tutor_0_8_0

Utilities to create exams

nixos-unstable 0.8.0
- nixpkgs-unstable 0.8.0
- nixos-unstable-small 0.8.0
nixos-26.05 0.8.0
- nixos-26.05-small 0.8.0
- nixpkgs-26.05-darwin 0.8.0

pkgs.perlPackages.TaskCatalystTutorial

Everything you need to follow the Catalyst Tutorial

nixos-unstable 0.06
- nixpkgs-unstable 0.06
- nixos-unstable-small 0.06
nixos-26.05 0.06
- nixos-26.05-small 0.06
- nixpkgs-26.05-darwin 0.06

pkgs.haskellPackages.timeless-tutorials

Initial project template from stack

nixos-unstable 1.0.0.0
- nixpkgs-unstable 1.0.0.0
- nixos-unstable-small 1.0.0.0
nixos-26.05 1.0.0.0
- nixos-26.05-small 1.0.0.0
- nixpkgs-26.05-darwin 1.0.0.0

pkgs.perl5Packages.TaskCatalystTutorial

Everything you need to follow the Catalyst Tutorial

nixos-unstable 0.06
- nixpkgs-unstable 0.06
- nixos-unstable-small 0.06
nixos-26.05 0.06
- nixos-26.05-small 0.06
- nixpkgs-26.05-darwin 0.06

Package maintainers

@RossSmyth Ross Smyth
@cherrypiejam Gongqi Huang

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-40743

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 1 month, 1 week ago by @LeSuisse Activity log

Created suggestion 1 month, 1 week ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 1 week ago

WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.

References

https://patchstack.com/database/wordpress/plugin/tutor/vulnerability/wordpress-… vdb-entry

Affected products

tutor

=<3.9.7

Matching in nixpkgs

pkgs.typstPackages.tutor

Utilities to create exams

nixos-unstable 0.8.0
- nixpkgs-unstable 0.8.0
- nixos-unstable-small 0.8.0
nixos-26.05 -
- nixos-26.05-small 0.8.0
- nixpkgs-26.05-darwin 0.8.0

pkgs.typstPackages.tutor_0_3_0

Utilities to create exams

nixos-unstable 0.3.0
- nixpkgs-unstable 0.3.0
- nixos-unstable-small 0.3.0
nixos-26.05 -
- nixos-26.05-small 0.3.0
- nixpkgs-26.05-darwin 0.3.0

pkgs.typstPackages.tutor_0_4_0

Utilities to create exams

nixos-unstable 0.4.0
- nixpkgs-unstable 0.4.0
- nixos-unstable-small 0.4.0
nixos-26.05 -
- nixos-26.05-small 0.4.0
- nixpkgs-26.05-darwin 0.4.0

pkgs.typstPackages.tutor_0_6_1

Utilities to create exams

nixos-unstable 0.6.1
- nixpkgs-unstable 0.6.1
- nixos-unstable-small 0.6.1
nixos-26.05 -
- nixos-26.05-small 0.6.1
- nixpkgs-26.05-darwin 0.6.1

pkgs.typstPackages.tutor_0_7_0

Utilities to create exams

nixos-unstable 0.7.0
- nixpkgs-unstable 0.7.0
- nixos-unstable-small 0.7.0
nixos-26.05 -
- nixos-26.05-small 0.7.0
- nixpkgs-26.05-darwin 0.7.0

pkgs.typstPackages.tutor_0_8_0

Utilities to create exams

nixos-unstable 0.8.0
- nixpkgs-unstable 0.8.0
- nixos-unstable-small 0.8.0
nixos-26.05 -
- nixos-26.05-small 0.8.0
- nixpkgs-26.05-darwin 0.8.0

pkgs.perlPackages.TaskCatalystTutorial

Everything you need to follow the Catalyst Tutorial

nixos-unstable 0.06
- nixpkgs-unstable 0.06
- nixos-unstable-small 0.06
nixos-26.05 -
- nixos-26.05-small 0.06
- nixpkgs-26.05-darwin 0.06

pkgs.haskellPackages.timeless-tutorials

None

nixos-unstable 1.0.0.0
- nixos-unstable-small 1.0.0.0
nixos-26.05 -
- nixos-26.05-small 1.0.0.0
- nixpkgs-26.05-darwin 1.0.0.0

pkgs.perl5Packages.TaskCatalystTutorial

Everything you need to follow the Catalyst Tutorial

nixos-unstable 0.06
- nixpkgs-unstable 0.06
- nixos-unstable-small 0.06
nixos-26.05 -
- nixos-26.05-small 0.06
- nixpkgs-26.05-darwin 0.06

Package maintainers

@cherrypiejam Gongqi Huang
@RossSmyth Ross Smyth

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-40740

updated 3 months, 1 week ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse dismissed (not in Nixpkgs) 3 months, 1 week ago

WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.7.

References

https://patchstack.com/database/Wordpress/Plugin/tutor/vulnerability/wordpress-… vdb-entry

Affected products

tutor

=<3.9.7

Matching in nixpkgs

pkgs.typstPackages.tutor

Utilities to create exams

nixos-unstable 0.8.0
- nixpkgs-unstable 0.8.0
- nixos-unstable-small 0.8.0

pkgs.typstPackages.tutor_0_3_0

Utilities to create exams

nixos-unstable 0.3.0
- nixpkgs-unstable 0.3.0
- nixos-unstable-small 0.3.0

pkgs.typstPackages.tutor_0_4_0

Utilities to create exams

nixos-unstable 0.4.0
- nixpkgs-unstable 0.4.0
- nixos-unstable-small 0.4.0

pkgs.typstPackages.tutor_0_6_1

Utilities to create exams

nixos-unstable 0.6.1
- nixpkgs-unstable 0.6.1
- nixos-unstable-small 0.6.1

pkgs.typstPackages.tutor_0_7_0

Utilities to create exams

nixos-unstable 0.7.0
- nixpkgs-unstable 0.7.0
- nixos-unstable-small 0.7.0

pkgs.typstPackages.tutor_0_8_0

Utilities to create exams

nixos-unstable 0.8.0
- nixpkgs-unstable 0.8.0
- nixos-unstable-small 0.8.0

pkgs.haskellPackages.egison-tutorial

A tutorial program for the Egison programming language

nixos-unstable 4.1.3
- nixpkgs-unstable 4.1.3
- nixos-unstable-small 4.1.3

pkgs.perlPackages.TaskCatalystTutorial

Everything you need to follow the Catalyst Tutorial

nixos-unstable 0.06
- nixpkgs-unstable 0.06
- nixos-unstable-small 0.06

pkgs.haskellPackages.timeless-tutorials

Initial project template from stack

nixos-unstable 1.0.0.0
- nixpkgs-unstable 1.0.0.0
- nixos-unstable-small 1.0.0.0

pkgs.perl5Packages.TaskCatalystTutorial

Everything you need to follow the Catalyst Tutorial

nixos-unstable 0.06
- nixpkgs-unstable 0.06
- nixos-unstable-small 0.06

pkgs.perl538Packages.TaskCatalystTutorial

None

pkgs.perl540Packages.TaskCatalystTutorial

None

Package maintainers

@RossSmyth Ross Smyth
@cherrypiejam Gongqi Huang

Dismissed

(not in Nixpkgs)

Permalink CVE-2025-32223

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 4 months ago by @LeSuisse Activity log

Created suggestion 4 months ago
@LeSuisse dismissed (not in Nixpkgs) 4 months ago

WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through 3.9.4.

References

https://patchstack.com/database/wordpress/plugin/tutor/vulnerability/wordpress-… vdb-entry

Affected products

tutor

=<3.9.4

Matching in nixpkgs

pkgs.typstPackages.tutor

Utilities to create exams

nixos-unstable 0.8.0
- nixpkgs-unstable 0.8.0
- nixos-unstable-small 0.8.0

pkgs.typstPackages.tutor_0_3_0

Utilities to create exams

nixos-unstable 0.3.0
- nixpkgs-unstable 0.3.0
- nixos-unstable-small 0.3.0

pkgs.typstPackages.tutor_0_4_0

Utilities to create exams

nixos-unstable 0.4.0
- nixpkgs-unstable 0.4.0
- nixos-unstable-small 0.4.0

pkgs.typstPackages.tutor_0_6_1

Utilities to create exams

nixos-unstable 0.6.1
- nixpkgs-unstable 0.6.1
- nixos-unstable-small 0.6.1

pkgs.typstPackages.tutor_0_7_0

Utilities to create exams

nixos-unstable 0.7.0
- nixpkgs-unstable 0.7.0
- nixos-unstable-small 0.7.0

pkgs.typstPackages.tutor_0_8_0

Utilities to create exams

nixos-unstable 0.8.0
- nixpkgs-unstable 0.8.0
- nixos-unstable-small 0.8.0

pkgs.haskellPackages.egison-tutorial

A tutorial program for the Egison programming language

nixos-unstable 4.1.3
- nixpkgs-unstable 4.1.3
- nixos-unstable-small 4.1.3

pkgs.perlPackages.TaskCatalystTutorial

Everything you need to follow the Catalyst Tutorial

nixos-unstable 0.06
- nixpkgs-unstable 0.06
- nixos-unstable-small 0.06

pkgs.haskellPackages.timeless-tutorials

Initial project template from stack

nixos-unstable 1.0.0.0
- nixpkgs-unstable 1.0.0.0
- nixos-unstable-small 1.0.0.0

pkgs.perl5Packages.TaskCatalystTutorial

Everything you need to follow the Catalyst Tutorial

nixos-unstable 0.06
- nixpkgs-unstable 0.06
- nixos-unstable-small 0.06

pkgs.perl538Packages.TaskCatalystTutorial

None

pkgs.perl540Packages.TaskCatalystTutorial

None

Package maintainers

@cherrypiejam Gongqi Huang
@RossSmyth Ross Smyth

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.typstPackages.tutor

pkgs.typstPackages.tutor_0_3_0

pkgs.typstPackages.tutor_0_4_0

pkgs.typstPackages.tutor_0_6_1

pkgs.typstPackages.tutor_0_7_0

pkgs.typstPackages.tutor_0_8_0

pkgs.perlPackages.TaskCatalystTutorial

pkgs.haskellPackages.timeless-tutorials

pkgs.perl5Packages.TaskCatalystTutorial

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.typstPackages.tutor

pkgs.typstPackages.tutor_0_3_0

pkgs.typstPackages.tutor_0_4_0

pkgs.typstPackages.tutor_0_6_1

pkgs.typstPackages.tutor_0_7_0

pkgs.typstPackages.tutor_0_8_0

pkgs.perlPackages.TaskCatalystTutorial

pkgs.haskellPackages.timeless-tutorials

pkgs.perl5Packages.TaskCatalystTutorial

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.typstPackages.tutor

pkgs.typstPackages.tutor_0_3_0

pkgs.typstPackages.tutor_0_4_0

pkgs.typstPackages.tutor_0_6_1

pkgs.typstPackages.tutor_0_7_0

pkgs.typstPackages.tutor_0_8_0

pkgs.haskellPackages.egison-tutorial

pkgs.perlPackages.TaskCatalystTutorial

pkgs.haskellPackages.timeless-tutorials

pkgs.perl5Packages.TaskCatalystTutorial

pkgs.perl538Packages.TaskCatalystTutorial

pkgs.perl540Packages.TaskCatalystTutorial

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.typstPackages.tutor

pkgs.typstPackages.tutor_0_3_0

pkgs.typstPackages.tutor_0_4_0

pkgs.typstPackages.tutor_0_6_1

pkgs.typstPackages.tutor_0_7_0

pkgs.typstPackages.tutor_0_8_0

pkgs.haskellPackages.egison-tutorial

pkgs.perlPackages.TaskCatalystTutorial

pkgs.haskellPackages.timeless-tutorials

pkgs.perl5Packages.TaskCatalystTutorial

pkgs.perl538Packages.TaskCatalystTutorial

pkgs.perl540Packages.TaskCatalystTutorial

Package maintainers