Nixpkgs security tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: wstunnel

Found 3 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-70367
5.4 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): None (N)
created an hour ago Activity log
  • Created suggestion an hour ago
Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services

A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.g., “::ffff:127.0.0.1”) or unspecified addresses ("0.0.0.0", "::"), enabling access to loopback-only services on the "stunnel" host that should not be network-reachable.

References

Affected products

stunnel

Matching in nixpkgs

pkgs.stunnel

Universal tls/ssl wrapper

  • nixos-unstable 5.76
    • nixpkgs-unstable 5.76
    • nixos-unstable-small 5.79
  • nixos-26.05 5.76
    • nixos-26.05-small 5.76
    • nixpkgs-26.05-darwin 5.76

pkgs.wstunnel

Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI

pkgs.ghostunnel

TLS proxy with mutual authentication support for securing non-TLS backend applications

Package maintainers

Untriaged
Permalink CVE-2026-70368
6.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): Low (L)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): Low (L)
created an hour ago Activity log
  • Created suggestion an hour ago
Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message

A stack-based out-of-bounds read vulnerability exists in the "s_vlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an out-of-bounds stack read and a potential crash. In certain corner cases, the same vulnerability could be used to replace a series of trailing "\n" characters with "\0".

References

Affected products

stunnel

Matching in nixpkgs

pkgs.stunnel

Universal tls/ssl wrapper

  • nixos-unstable 5.76
    • nixpkgs-unstable 5.76
    • nixos-unstable-small 5.79
  • nixos-26.05 5.76
    • nixos-26.05-small 5.76
    • nixpkgs-26.05-darwin 5.76

pkgs.wstunnel

Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI

pkgs.ghostunnel

TLS proxy with mutual authentication support for securing non-TLS backend applications

Package maintainers

Untriaged
Permalink CVE-2026-54909
5.3 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): Low (L)
created 4 days, 1 hour ago Activity log
  • Created suggestion 4 days, 1 hour ago
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.

Affected products

stun
  • ==< 3.1.3

Matching in nixpkgs

pkgs.stun

Stun server and test client

  • nixos-unstable 0.97
    • nixpkgs-unstable 0.97
    • nixos-unstable-small 0.97
  • nixos-26.05 0.97
    • nixos-26.05-small 0.97
    • nixpkgs-26.05-darwin 0.97

pkgs.stunnel

Universal tls/ssl wrapper

  • nixos-unstable 5.76
    • nixpkgs-unstable 5.76
    • nixos-unstable-small 5.79
  • nixos-26.05 5.76
    • nixos-26.05-small 5.76
    • nixpkgs-26.05-darwin 5.76

pkgs.stunner

Detect your NAT quickly and easily, and that's the bottom line

pkgs.wstunnel

Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI

pkgs.ghostunnel

TLS proxy with mutual authentication support for securing non-TLS backend applications

pkgs.stuntrally

3D racing game with Sci-Fi elements and own Track Editor

  • nixos-unstable 3.3
    • nixpkgs-unstable 3.3
    • nixos-unstable-small 3.3
  • nixos-26.05 3.3
    • nixos-26.05-small 3.3
    • nixpkgs-26.05-darwin 3.3

Package maintainers