Nixpkgs security tracker
5.9 MEDIUM
- CVSS version (CVSS): 4.0
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Attack Requirement (AT): None (N)
- Privileges Required (PR): High (H)
- User Interaction (UI): None (N)
- Vulnerable System Impact Confidentiality (VC): High (H)
- Vulnerable System Impact Integrity (VI): None (N)
- Vulnerable System Impact Availability (VA): None (N)
- Subsequent System Impact Confidentiality (SC): None (N)
- Subsequent System Impact Integrity (SI): None (N)
- Subsequent System Impact Availability (SA): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Attack Requirement (MAT): None (N)
- Modified Privileges Required (MPR): High (H)
- Modified User Interaction (MUI): None (N)
- Modified Vulnerable System Impact Confidentiality (MVC): High (H)
- Modified Vulnerable System Impact Integrity (MVI): None (N)
- Modified Vulnerable System Impact Availability (MVA): None (N)
- Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
- Modified Subsequent System Impact Integrity (MSI): Negligible (N)
- Modified Subsequent System Impact Availability (MSA): Negligible (N)
- Safety (S): Not Defined (X)
- Automatable (AU): Not Defined (X)
- Recovery (R): Not Defined (X)
- Value Density (V): Not Defined (X)
- Vulnerability Response Effort (RE): Not Defined (X)
- Provider Urgency (U): Not Defined (X)
- Confidentiality Req. (CR): Not Defined (X)
- Integrity Req. (IR): Not Defined (X)
- Availability Req. (AR): Not Defined (X)
- Exploit Maturity (E): Not Defined (X)
Activity log
- Created suggestion
Improper Neutralization of Special Elements used in an SQL Command …
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
References
Affected products
- ==ASUSWRT 3.0.0.4_388 series
- ==ASUSWRT 3.0.0.6_102 series
- ==ASUSWRT 3.0.0.4_386 series
Matching in nixpkgs
pkgs.router
Configurable, high-performance routing runtime for Apollo Federation
pkgs.kube-router
All-in-one router, firewall and service proxy for Kubernetes
pkgs.linux-router
Set Linux as router / Wifi hotspot / proxy in one command
pkgs.routersploit
Exploitation Framework for Embedded Devices
pkgs.invidious-router
Go application that routes requests to different Invidious instances based on their health status and (optional) response time
pkgs.claude-code-router
Tool to route Claude Code requests to different models and customize any request
pkgs.yaml-schema-router
Content-based JSON schema routing for yaml-language-server
pkgs.upnp-router-control
Access some parameters of the router and manage port forwarding
pkgs.openthread-border-router
Thread border router for POSIX-based platforms
-
nixos-26.05 0-unstable-2025-06-12
- nixos-26.05-small 0-unstable-2025-06-12
- nixpkgs-26.05-darwin 0-unstable-2025-06-12
pkgs.linux-router-without-wifi
Set Linux as router / Wifi hotspot / proxy in one command
pkgs.python313Packages.asusrouter
API wrapper for communication with ASUSWRT-powered routers using HTTP protocol
pkgs.python314Packages.asusrouter
API wrapper for communication with ASUSWRT-powered routers using HTTP protocol
pkgs.terraform-providers.routeros
None
pkgs.haskellPackages.gemini-router
A simple Happstack-style Gemini router
pkgs.open-music-kontrollers.router
Atom/Audio/CV router LV2 plugin bundle
-
nixos-unstable 2021-04-13
- nixpkgs-unstable 2021-04-13
- nixos-unstable-small 2021-04-13
-
nixos-26.05 2021-04-13
- nixos-26.05-small 2021-04-13
- nixpkgs-26.05-darwin 2021-04-13
pkgs.python313Packages.librouteros
Python implementation of the MikroTik RouterOS API
pkgs.python314Packages.librouteros
Python implementation of the MikroTik RouterOS API
pkgs.python313Packages.routeros-api
Python API to RouterBoard devices produced by MikroTik
pkgs.python314Packages.routeros-api
Python API to RouterBoard devices produced by MikroTik
pkgs.python313Packages.llm-openrouter
LLM plugin for models hosted by OpenRouter
pkgs.python314Packages.llm-openrouter
LLM plugin for models hosted by OpenRouter
pkgs.python313Packages.drf-nested-routers
Provides routers and fields to create nested resources in the Django Rest Framework
pkgs.python313Packages.python-open-router
Asynchronous Python client for Open Router
pkgs.python314Packages.drf-nested-routers
Provides routers and fields to create nested resources in the Django Rest Framework
pkgs.python314Packages.python-open-router
Asynchronous Python client for Open Router
Package maintainers
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@s1ls Silas Schöffel <sils@sils.li>
-
@johanot Johan Thomsen <write@ownrisk.dk>
-
@magnetophon Bart Brouns <bart@magnetophon.nl>
-
@JamieMagee Jamie Magee <jamie.magee@gmail.com>
-
@leonm1 Matt Leon
-
@mrene Mathieu Rene <mathieu.rene@gmail.com>
-
@felschr Felix Schröter <dev@felschr.com>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@arcuru Patrick Jackson <patrick@jackson.dev>
-
@philiptaron Philip Taron <philip.taron@gmail.com>
-
@quentinmit Quentin Smith <quentin@mit.edu>
-
@bbigras Bruno Bigras <bigras.bruno@gmail.com>
-
@thtrf thtrf <thtrf@proton.me>
-
@fgaz Francesco Gazzetta <fgaz@fgaz.me>
-
@kpbaks Kristoffer Plagborg Bak Sørensen <kristoffer.pbs@gmail.com>