Dismissed suggestions

These automatic suggestions were dismissed after initial triaging.

to select a suggestion for revision.

View:

Compact

Detailed

Dismissed
(not in Nixpkgs)

          Permalink
          
            CVE-2026-32686
          
              updated
            
          4 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          12 hours ago
          
          @LeSuisse
          
              dismissed
                (not in Nixpkgs)
              
          4 hours ago
          
            Unbounded exponent in decimal enables unauthenticated DoS
          
      https://github.com/ericmj/decimal/security/advisories/GHSA-rhv4-8758-jx7v
    
    relatedvendor-advisory
  
      https://cna.erlef.org/cves/CVE-2026-32686.html
    
    related
  
      https://osv.dev/vulnerability/EEF-CVE-2026-32686
    
    related
  
      https://github.com/ericmj/decimal/commit/6a523f3a73b8c9974540e21c7aa88f1258bb35…
    
    patch
  
    decimal

            <3.0.0
          
    ericmj/decimal

            <6a523f3a73b8c9974540e21c7aa88f1258bb35ae

Dismissed
(not in Nixpkgs)

          Permalink
          
            CVE-2026-7414
          
        9.8 CRITICAL
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          4 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          12 hours ago
          
          @LeSuisse
          
              dismissed
                (not in Nixpkgs)
              
          4 hours ago
          
            Hardcoded credentials in Yarbo robot firmware
          
      https://github.com/Bin4ry/yarbo-nat-in-my-back-yard
    
    third-party-advisory
  
      https://takeonme.org/gcves/GCVE-1337-2026-0000000000000000000000000000000000000…
    
    third-party-advisory
  
      https://github.com/Bin4ry/yarbo-nat-in-my-back-yard#3--hardcoded-developer-cred…
    
    exploit
  
    Firmware

            =<2.3.9

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-8142

updated 4 hours ago by @LeSuisse Activity log

Created suggestion 12 hours ago
@LeSuisse dismissed (not in Nixpkgs) 4 hours ago

CVE-2026-8142

VINCE

=<3.0.38

Dismissed
(not in Nixpkgs)

          Permalink
          
            CVE-2026-41589
          
        9.6 CRITICAL
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Changed (C)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): None (N)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Changed (C)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): None (N)
        
              updated
            
          4 hours ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          12 hours ago
          
          @LeSuisse
          
              dismissed
                (not in Nixpkgs)
              
          4 hours ago
          
            Wish has SCP Path Traversal that allows arbitrary file read/write
          
      https://github.com/charmbracelet/wish/security/advisories/GHSA-xjvp-7243-rg9h
    
    x_refsource_CONFIRMexploit
  
      https://github.com/charmbracelet/wish/releases/tag/v2.0.1
    
    x_refsource_MISC
  
    wish

            ==>= 2.0.0, < 2.0.1

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-27415

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 4 hours ago by @LeSuisse Activity log

Created suggestion 12 hours ago
@LeSuisse dismissed (not in Nixpkgs) 4 hours ago

WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

https://patchstack.com/database/wordpress/plugin/woo-bulk-editor/vulnerability/… vdb-entry

woo-bulk-editor

=<1.1.5

Dismissed

(exclusively hosted service)

Permalink CVE-2026-26164

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 12 hours ago Activity log

Created & dismissed (exclusively hosted service) suggestion 12 hours ago

M365 Copilot Information Disclosure Vulnerability

M365 Copilot Information Disclosure Vulnerability patchvendor-advisory

Microsoft 365 Copilot's Business Chat

Dismissed

(exclusively hosted service)

Permalink CVE-2026-33111

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 12 hours ago Activity log

Created & dismissed (exclusively hosted service) suggestion 12 hours ago

Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability patchvendor-advisory

Copilot Chat (Microsoft Edge)

Dismissed

(exclusively hosted service)

Permalink CVE-2026-41105

8.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 12 hours ago Activity log

Created & dismissed (exclusively hosted service) suggestion 12 hours ago

Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability

Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability patchvendor-advisory

Azure Monitor Action Group notification system

Dismissed

(exclusively hosted service)

Permalink CVE-2026-42826

10.0 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 12 hours ago Activity log

Created & dismissed (exclusively hosted service) suggestion 12 hours ago

Azure DevOps Information Disclosure Vulnerability

Azure DevOps Information Disclosure Vulnerability patchvendor-advisory

Azure DevOps

Dismissed

(exclusively hosted service)

Permalink CVE-2026-33844

9.0 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 12 hours ago Activity log

Created & dismissed (exclusively hosted service) suggestion 12 hours ago

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability patchvendor-advisory

Azure Managed Instance for Apache Cassandra