Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestions search

All statuses
Filter by:
With package: vscode-extensions.chris-hayes.chatgpt-reborn

Found 2 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-97326
5.5 MEDIUM
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): Low (L)
  • Vulnerable System Impact Integrity (VI): Low (L)
  • Vulnerable System Impact Availability (VA): Low (L)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Exploit Maturity (E): POC (P)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
  • Modified Vulnerable System Impact Integrity (MVI): Low (L)
  • Modified Vulnerable System Impact Availability (MVA): Low (L)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
created 2 days, 19 hours ago Activity log
  • Created suggestion 2 days, 19 hours ago
songxinjianqwe Chat chat-server ChatServer.java server-side request forgery

A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this issue is some unknown functionality of the file chat-server/src/main/java/cn/sinjinsong/chat/server/ChatServer.java of the component chat-server. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Chat
  • ==ac63d25297079eed5e4ba7e88d3b7a032637150d

Matching in nixpkgs

pkgs.chatd

Chat with your documents using local AI

  • nixos-unstable -
    • nixos-unstable-small 1.1.2
  • nixos-26.05 -
    • nixos-26.05-small 1.1.2

pkgs.kchat

Instant messaging service part of Infomaniak KSuite

  • nixos-unstable -
    • nixos-unstable-small 3.5.1
  • nixos-26.05 -
    • nixos-26.05-small 3.3.3

pkgs.nchat

Terminal-based chat client with support for Telegram and WhatsApp

  • nixos-unstable -
  • nixos-26.05 -

pkgs.aichat

Use GPT-4(V), Gemini, LocalAI, Ollama and other LLMs in the terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.chatty

XMPP and SMS messaging via libpurple and ModemManager

  • nixos-unstable -
    • nixos-unstable-small 0.8.9
  • nixos-26.05 -
    • nixos-26.05-small 0.8.9

pkgs.ttchat

Connect to a Twitch channel's chat from your terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.wechat

Messaging and calling app

  • nixos-unstable -
  • nixos-26.05 -

pkgs.weechat

Fast, light and extensible chat client

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ssh-chat

Chat over SSH

  • nixos-unstable -
  • nixos-26.05 -

pkgs.chatblade

CLI Swiss Army Knife for ChatGPT

  • nixos-unstable -
    • nixos-unstable-small 0.7.0
  • nixos-26.05 -
    • nixos-26.05-small 0.7.0

pkgs.librechat

Open-source app for all your AI conversations, fully customizable and compatible with any AI provider

  • nixos-unstable -
    • nixos-unstable-small 0.8.7
  • nixos-26.05 -
    • nixos-26.05-small 0.8.6

pkgs.aider-chat

AI pair programming in your terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.fluffychat

Chat with your friends (matrix client)

  • nixos-unstable -
    • nixos-unstable-small 2.9.4
  • nixos-26.05 -
    • nixos-26.05-small 2.6.0

pkgs.chatgpt-cli

Interactive CLI for ChatGPT

  • nixos-unstable -
    • nixos-unstable-small 1.3.5
  • nixos-26.05 -
    • nixos-26.05-small 1.3.5

pkgs.chatterino2

Chat client for Twitch chat

  • nixos-unstable -
    • nixos-unstable-small 2.5.5
  • nixos-26.05 -
    • nixos-26.05-small 2.5.5

pkgs.chatterino7

Chat client for Twitch chat

  • nixos-unstable -
    • nixos-unstable-small 7.5.5
  • nixos-26.05 -
    • nixos-26.05-small 7.5.5

pkgs.commet-chat

Client for Matrix focused on providing a feature rich experience while maintaining a simple interface

pkgs.libdeltachat

Delta Chat Rust Core library

  • nixos-unstable -
  • nixos-26.05 -

pkgs.libgnunetchat

Library for secure, decentralized chat using GNUnet network services

  • nixos-unstable -
    • nixos-unstable-small 0.6.1
  • nixos-26.05 -
    • nixos-26.05-small 0.6.1

pkgs.arcanechat-tui

Lightweight Delta Chat client

  • nixos-unstable -
  • nixos-26.05 -

pkgs.fluffychat-web

Chat with your friends (matrix client)

  • nixos-unstable -
    • nixos-unstable-small 2.9.4
  • nixos-26.05 -
    • nixos-26.05-small 2.6.0

pkgs.pkgsRocm.chatd

Chat with your documents using local AI

  • nixos-unstable -
    • nixos-unstable-small 1.1.2
  • nixos-26.05 -
    • nixos-26.05-small 1.1.2

pkgs.aider-chat-full

AI pair programming in your terminal

  • nixos-unstable -
  • nixos-26.05 -

pkgs.chatzone-desktop

Ozon corporate messenger

  • nixos-unstable -
    • nixos-unstable-small 5.7.0
  • nixos-26.05 -
    • nixos-26.05-small 5.7.0

pkgs.chatgpt-shell-cli

Simple shell script to use OpenAI's ChatGPT and DALL-E from the terminal. No Python or JS required

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

pkgs.deltachat-desktop

Email-based instant messaging for Desktop

  • nixos-unstable -
  • nixos-26.05 -

pkgs.weechat-unwrapped

Fast, light and extensible chat client

  • nixos-unstable -
  • nixos-26.05 -

pkgs.mautrix-googlechat

Matrix-Google Chat puppeting bridge

  • nixos-unstable -
    • nixos-unstable-small 0.5.2
  • nixos-26.05 -
    • nixos-26.05-small 0.5.2

pkgs.kdePackages.neochat

A client for matrix, the decentralized communication protocol

  • nixos-unstable -
  • nixos-26.05 -

pkgs.weechatScripts.edit

This simple weechat plugin allows you to compose messages in your $EDITOR

  • nixos-unstable -
    • nixos-unstable-small 1.0.2
  • nixos-26.05 -
    • nixos-26.05-small 1.0.2

pkgs.deltachat-rpc-server

Delta Chat RPC server exposing JSON-RPC core API over standard I/O

  • nixos-unstable -
  • nixos-26.05 -

pkgs.reticulum-group-chat

Pure-Go LXMF group-chat hub for the Reticulum network — a single static binary that relays many-to-many encrypted text chat over LoRa, TCP/IP, and mixed meshes. No Python, no third-party RNS library

  • nixos-unstable -

pkgs.weechatScripts.autosort

autosort automatically keeps your buffers sorted and grouped by server

  • nixos-unstable -
    • nixos-unstable-small 3.10
  • nixos-26.05 -
    • nixos-26.05-small 3.10

pkgs.python313Packages.fschat

Open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python314Packages.fschat

Open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python313Packages.chatlas

Friendly guide to building LLM chat apps in Python with less effort and more clarity

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python314Packages.chatlas

Friendly guide to building LLM chat apps in Python with less effort and more clarity

  • nixos-unstable -
  • nixos-26.05 -

pkgs.weechatScripts.weechat-go

WeeChat script to quickly jump to different buffers

  • nixos-unstable -
    • nixos-unstable-small 2.7
  • nixos-26.05 -
    • nixos-26.05-small 2.7

pkgs.weechatScripts.weechat-autosort

Autosort is a weechat script to automatically or manually keep your buffers sorted

  • nixos-unstable -
    • nixos-unstable-small 3.9
  • nixos-26.05 -
    • nixos-26.05-small 3.9

pkgs.python313Packages.chat-downloader

Simple tool used to retrieve chat messages from livestreams, videos, clips and past broadcasts

  • nixos-unstable -
    • nixos-unstable-small 0.2.8
  • nixos-26.05 -
    • nixos-26.05-small 0.2.8

pkgs.python314Packages.chat-downloader

Simple tool used to retrieve chat messages from livestreams, videos, clips and past broadcasts

  • nixos-unstable -
    • nixos-unstable-small 0.2.8
  • nixos-26.05 -
    • nixos-26.05-small 0.2.8

pkgs.gnomeExtensions.penguin-ai-chatbot

A GNOME Shell extension that provides a chatbot interface using various LLM providers, including Anthropic, OpenAI, Gemini, and OpenRouter. Features include multiple provider support, customizable models, chat history, customizable appearance, a keyboard shortcut, web search, location (by using the extension, you consent to sharing your location with OpenRouter for AI Tools) and copy-to-clipboard functionality.

  • nixos-unstable -
    • nixos-unstable-small 28
  • nixos-26.05 -
    • nixos-26.05-small 25

Package maintainers

Untriaged
Permalink CVE-2026-8210
1.9 LOW
  • CVSS version (CVSS): 4.0
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Attack Requirement (AT): None (N)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Vulnerable System Impact Confidentiality (VC): Low (L)
  • Vulnerable System Impact Integrity (VI): Low (L)
  • Vulnerable System Impact Availability (VA): Low (L)
  • Subsequent System Impact Confidentiality (SC): None (N)
  • Subsequent System Impact Integrity (SI): None (N)
  • Subsequent System Impact Availability (SA): None (N)
  • Exploit Maturity (E): POC (P)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Attack Requirement (MAT): None (N)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
  • Modified Vulnerable System Impact Integrity (MVI): Low (L)
  • Modified Vulnerable System Impact Availability (MVA): Low (L)
  • Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
  • Modified Subsequent System Impact Integrity (MSI): Negligible (N)
  • Modified Subsequent System Impact Availability (MSA): Negligible (N)
  • Safety (S): Not Defined (X)
  • Automatable (AU): Not Defined (X)
  • Recovery (R): Not Defined (X)
  • Value Density (V): Not Defined (X)
  • Vulnerability Response Effort (RE): Not Defined (X)
  • Provider Urgency (U): Not Defined (X)
  • Confidentiality Req. (CR): Not Defined (X)
  • Integrity Req. (IR): Not Defined (X)
  • Availability Req. (AR): Not Defined (X)
created 4 months, 2 weeks ago Activity log
  • Created suggestion 4 months, 2 weeks ago
aandrew-me tgpt Update helper.go helper.Update command injection

A security vulnerability has been detected in aandrew-me tgpt up to 2.11.1 on Linux/macOS. Affected by this vulnerability is the function helper.Update of the file helper.go of the component Update Handler. The manipulation leads to command injection. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

tgpt
  • ==2.11.1
  • ==2.11.0

Matching in nixpkgs

pkgs.tgpt

ChatGPT in terminal without needing API keys

  • nixos-unstable -
  • nixos-26.05 -

pkgs.pentestgpt

GPT-empowered penetration testing tool

  • nixos-unstable -
    • nixos-unstable-small 1.0.0
  • nixos-26.05 -
    • nixos-26.05-small 1.0.0

pkgs.chatgpt-cli

Interactive CLI for ChatGPT

  • nixos-unstable -
    • nixos-unstable-small 1.3.5
  • nixos-26.05 -
    • nixos-26.05-small 1.3.5

pkgs.chatgpt-shell-cli

Simple shell script to use OpenAI's ChatGPT and DALL-E from the terminal. No Python or JS required

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

Package maintainers