Nixpkgs security tracker
9.6 CRITICAL
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Changed (C)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Changed (C)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed
Use after free in DigitalCredentials in Google Chrome on Windows …
Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
References
Affected products
- <149.0.7827.155
Matching in nixpkgs
pkgs.netflix
Open Netflix in Google Chrome app mode
pkgs.chromedriver
WebDriver server for running Selenium tests on Chrome
-
nixos-unstable 148.0.7778.178
- nixpkgs-unstable 149.0.7827.53
- nixos-unstable-small 149.0.7827.53
-
nixos-26.05 149.0.7827.53
- nixos-26.05-small 149.0.7827.53
- nixpkgs-26.05-darwin 149.0.7827.53
pkgs.mkchromecast
Cast macOS and Linux Audio/Video to your Google Cast and Sonos Devices
-
nixos-unstable 2025-12-21
- nixpkgs-unstable 2025-12-21
- nixos-unstable-small 2025-12-21
-
nixos-26.05 2025-12-21
- nixos-26.05-small 2025-12-21
- nixpkgs-26.05-darwin 2025-12-21
pkgs.chrome-export
Scripts to save Google Chrome's bookmarks and history as HTML bookmarks files
pkgs.go-chromecast
CLI for Google Chromecast, Home devices and Cast Groups
pkgs.google-chrome
Freeware web browser developed by Google
-
nixos-unstable 148.0.7778.178
- nixpkgs-unstable 149.0.7827.54
- nixos-unstable-small 149.0.7827.53
-
nixos-26.05 149.0.7827.53
- nixos-26.05-small 149.0.7827.53
- nixpkgs-26.05-darwin 149.0.7827.53
pkgs.xf86videoopenchrome
VIA Technologies UniChrome and Chrome9 IGP video driver for the Xorg X server
pkgs.chrome-token-signing
Chrome and Firefox extension for signing with your eID on the web
pkgs.chrome-pak-customizer
Simple batch tool to customize pak files in chrome or chromium-based browser
-
nixos-unstable 2.0-unstable-2021-06-24
- nixpkgs-unstable 2.0-unstable-2021-06-24
- nixos-unstable-small 2.0-unstable-2021-06-24
-
nixos-26.05 2.0-unstable-2021-06-24
- nixos-26.05-small 2.0-unstable-2021-06-24
- nixpkgs-26.05-darwin 2.0-unstable-2021-06-24
pkgs.electron-chromedriver
WebDriver server for running Selenium tests on Chrome
pkgs.xf86-video-openchrome
VIA Technologies UniChrome and Chrome9 IGP video driver for the Xorg X server
pkgs.undetected-chromedriver
Custom Selenium ChromeDriver that passes all bot mitigation systems
-
nixos-unstable 148.0.7778.178
- nixpkgs-unstable 149.0.7827.53
- nixos-unstable-small 149.0.7827.53
-
nixos-26.05 149.0.7827.53
- nixos-26.05-small 149.0.7827.53
- nixpkgs-26.05-darwin 149.0.7827.53
pkgs.electron-chromedriver_38
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_39
None
pkgs.electron-chromedriver_40
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_41
WebDriver server for running Selenium tests on Chrome
pkgs.electron-chromedriver_42
WebDriver server for running Selenium tests on Chrome
pkgs.ocamlPackages.chrome-trace
Chrome trace event generation library
pkgs.noto-fonts-monochrome-emoji
Monochrome emoji font
pkgs.python313Packages.pychromecast
Library for Python to communicate with the Google Chromecast
pkgs.python314Packages.pychromecast
Library for Python to communicate with the Google Chromecast
pkgs.ocamlPackages_latest.chrome-trace
Chrome trace event generation library
pkgs.python313Packages.undetected-chromedriver
Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems
pkgs.python314Packages.undetected-chromedriver
Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems
Package maintainers
-
@bdesham Benjamin Esham <benjamin@esham.io>
-
@UlyssesZh Ulysses Zhan <ulysseszhan@gmail.com>
-
@mmahut Marek Mahut <marek.mahut@gmail.com>
-
@networkException networkException <nix@nwex.de>
-
@emilylange Emily Lange <nix@emilylange.de>
-
@TomaSajt TomaSajt
-
@teutat3s teutat3s <teutates@mailbox.org>
-
@liam-murphy14 Liam Murphy <liam.murphy137@gmail.com>
-
@yayayayaka Yaya <github@uwu.is>
-
@zi3m5f zi3m5f <k7n3o3a6f@mozmail.com>
-
@iedame Rafael Ieda <git@ieda.me>
-
@mdaniels5757 Michael Daniels <nix@mdaniels.me>
-
@nagisa Simonas Kazlauskas <nixpkgs@kazlauskas.me>
-
@Shou Benedict Aas <x+g@shou.io>
-
@roberth Robert Hensing <nixpkgs@roberthensing.nl>
-
@nicoonoclaste nicoo <nicoo@debian.org>