Nixpkgs security tracker

Permalink CVE-2013-2018

updated 5 months, 1 week ago by @pyrox0 Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse ignored package boinctui 5 months, 1 week ago
@pyrox0 dismissed 5 months, 1 week ago

Multiple SQL injection vulnerabilities in BOINC allow remote attackers to …

Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

http://www.openwall.com/lists/oss-security/2013/04/28/3 x_refsource_MISCx_transferred
http://www.openwall.com/lists/oss-security/2013/04/29/11 x_refsource_MISCx_transferred

Affected products

BOINC

==possibly 7.x and earlier

Matching in nixpkgs

pkgs.boinc

Free software for distributed and grid computing

nixos-unstable 8.2.8
- nixpkgs-unstable 8.2.8
- nixos-unstable-small 8.2.8

pkgs.boinc-headless

Free software for distributed and grid computing

nixos-unstable 8.2.8
- nixpkgs-unstable 8.2.8
- nixos-unstable-small 8.2.8

Ignored packages (1)

pkgs.boinctui

Curses based fullscreen BOINC manager

nixos-unstable 2.7.1-unstable-2023-12-14
- nixpkgs-unstable 2.7.1-unstable-2023-12-14
- nixos-unstable-small 2.7.1-unstable-2023-12-14

Package maintainers

@Luflosi Luflosi <luflosi@luflosi.de>

Do not apply to nixpkgs versions

Permalink CVE-2026-2650

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 5 months, 1 week ago by @pyrox0 Activity log

Created suggestion 5 months, 1 week ago
@pyrox0 ignored
19 packages
- netflix
- mkchromecast
- chrome-export
- go-chromecast
- xf86videoopenchrome
- chrome-token-signing
- chrome-pak-customizer
- xf86-video-openchrome
- xorg.xf86videoopenchrome
- ocamlPackages.chrome-trace
- noto-fonts-monochrome-emoji
- python312Packages.pychromecast
- python313Packages.pychromecast
- python314Packages.pychromecast
- ocamlPackages_latest.chrome-trace
- python312Packages.undetected-chromedriver
- python313Packages.undetected-chromedriver
- python314Packages.undetected-chromedriver
- grafanaPlugins.ventura-psychrometric-panel
5 months, 1 week ago
@pyrox0 dismissed 5 months, 1 week ago

Heap buffer overflow in Media in Google Chrome prior to …

Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

References

Affected products

Chrome

<145.0.7632.109

Matching in nixpkgs

pkgs.chromedriver

WebDriver server for running Selenium tests on Chrome

nixos-unstable 145.0.7632.67
- nixpkgs-unstable 145.0.7632.75
- nixos-unstable-small 145.0.7632.75

pkgs.google-chrome

Freeware web browser developed by Google

nixos-unstable 145.0.7632.67
- nixpkgs-unstable 145.0.7632.75
- nixos-unstable-small 145.0.7632.75

pkgs.electron-chromedriver

WebDriver server for running Selenium tests on Chrome

nixos-unstable 38.8.1
- nixpkgs-unstable 38.8.1
- nixos-unstable-small 38.8.1

pkgs.undetected-chromedriver

Custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 145.0.7632.67
- nixpkgs-unstable 145.0.7632.75
- nixos-unstable-small 145.0.7632.75

pkgs.electron-chromedriver_37

WebDriver server for running Selenium tests on Chrome

nixos-unstable 37.10.3
- nixpkgs-unstable 37.10.3
- nixos-unstable-small 37.10.3

pkgs.electron-chromedriver_38

WebDriver server for running Selenium tests on Chrome

nixos-unstable 38.8.1
- nixpkgs-unstable 38.8.1
- nixos-unstable-small 38.8.1

pkgs.electron-chromedriver_39

WebDriver server for running Selenium tests on Chrome

nixos-unstable 39.5.2
- nixpkgs-unstable 39.5.2
- nixos-unstable-small 39.5.2

pkgs.electron-chromedriver_40

WebDriver server for running Selenium tests on Chrome

nixos-unstable 40.3.0
- nixpkgs-unstable 40.3.0
- nixos-unstable-small 40.3.0

Ignored packages (19)

pkgs.netflix

Open Netflix in Google Chrome app mode

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.mkchromecast

Cast macOS and Linux Audio/Video to your Google Cast and Sonos Devices

nixos-unstable 2025-12-21
- nixpkgs-unstable 2025-12-21
- nixos-unstable-small 2025-12-21

pkgs.chrome-export

Scripts to save Google Chrome's bookmarks and history as HTML bookmarks files

nixos-unstable 2.0.2
- nixpkgs-unstable 2.0.2
- nixos-unstable-small 2.0.2

pkgs.go-chromecast

CLI for Google Chromecast, Home devices and Cast Groups

nixos-unstable 0.3.4
- nixpkgs-unstable 0.3.4
- nixos-unstable-small 0.3.4

pkgs.xf86videoopenchrome

VIA Technologies UniChrome and Chrome9 IGP video driver for the Xorg X server

nixos-unstable 0.6.225
- nixpkgs-unstable 0.6.225
- nixos-unstable-small 0.6.225

pkgs.chrome-token-signing

Chrome and Firefox extension for signing with your eID on the web

nixos-unstable 1.1.5
- nixpkgs-unstable 1.1.5
- nixos-unstable-small 1.1.5

pkgs.chrome-pak-customizer

Simple batch tool to customize pak files in chrome or chromium-based browser

nixos-unstable 2.0-unstable-2021-06-24
- nixpkgs-unstable 2.0-unstable-2021-06-24
- nixos-unstable-small 2.0-unstable-2021-06-24

pkgs.xf86-video-openchrome

VIA Technologies UniChrome and Chrome9 IGP video driver for the Xorg X server

nixos-unstable 0.6.225
- nixpkgs-unstable 0.6.225
- nixos-unstable-small 0.6.225

pkgs.ocamlPackages.chrome-trace

Chrome trace event generation library

nixos-unstable 3.20.2
- nixpkgs-unstable 3.20.2
- nixos-unstable-small 3.20.2

pkgs.noto-fonts-monochrome-emoji

Monochrome emoji font

nixos-unstable 3.000
- nixpkgs-unstable 3.000
- nixos-unstable-small 3.000

pkgs.python312Packages.pychromecast

None

pkgs.python313Packages.pychromecast

Library for Python to communicate with the Google Chromecast

nixos-unstable 14.0.9
- nixpkgs-unstable 14.0.9
- nixos-unstable-small 14.0.9

pkgs.python314Packages.pychromecast

Library for Python to communicate with the Google Chromecast

nixos-unstable 14.0.9
- nixpkgs-unstable 14.0.9
- nixos-unstable-small 14.0.9

pkgs.ocamlPackages_latest.chrome-trace

Chrome trace event generation library

nixos-unstable 3.20.2
- nixpkgs-unstable 3.20.2
- nixos-unstable-small 3.20.2

pkgs.python312Packages.undetected-chromedriver

None

pkgs.python313Packages.undetected-chromedriver

Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 3.5.5
- nixpkgs-unstable 3.5.5
- nixos-unstable-small 3.5.5

pkgs.python314Packages.undetected-chromedriver

Python library for the custom Selenium ChromeDriver that passes all bot mitigation systems

nixos-unstable 3.5.5
- nixpkgs-unstable 3.5.5
- nixos-unstable-small 3.5.5

pkgs.grafanaPlugins.ventura-psychrometric-panel

Grafana plugin to display air conditions on a psychrometric chart

nixos-unstable 5.1.0
- nixpkgs-unstable 5.1.0
- nixos-unstable-small 5.1.0

Package maintainers

@emilylange Emily Lange <nix@emilylange.de>
@networkException networkException <nix@nwex.de>
@liam-murphy14 Liam Murphy <liam.murphy137@gmail.com>
@yayayayaka Yaya <github@uwu.is>
@TomaSajt TomaSajt
@teutat3s teutat3s <teutates@mailbox.org>
@mdaniels5757 Michael Daniels <nix@mdaniels.me>
@iedame Rafael Ieda <git@ieda.me>

Does not apply to nixpkgs versions

Permalink CVE-2014-9192

updated 5 months, 1 week ago by @pyrox0 Activity log

Created suggestion 5 months, 1 week ago
@pyrox0 ignored package vtsls 5 months, 1 week ago
@pyrox0 dismissed 5 months, 1 week ago

Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through …

Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.

References

https://ics-cert.us-cert.gov//advisories/ICSA-14-343-02 x_refsource_MISCx_transferred
71591 x_refsource_BIDvdb-entryx_transferred
https://www.cisa.gov/news-events/ics-advisories/icsa-14-343-02
http://www.trihedral.com/help/#Op_Welcome/Wel_UpgradeNotes.htm

Affected products

VTS

<9.1.19
<10.2.21

n/a

==n/a

Ignored packages (1)

pkgs.vtsls

LSP wrapper for typescript extension of vscode

nixos-unstable 0.2.9
- nixpkgs-unstable 0.2.9
- nixos-unstable-small 0.2.9

Does not apply to nixpkgs

Permalink CVE-2014-3495

updated 5 months, 1 week ago by @pyrox0 Activity log

Created suggestion 5 months, 1 week ago
@pyrox0 dismissed 5 months, 1 week ago

duplicity 0.6.24 has improper verification of SSL certificates

References

https://security-tracker.debian.org/tracker/CVE-2014-3495 x_refsource_MISCx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3495 x_refsource_MISCx_transferred
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-3495 x_refsource_MISCx_transferred
https://access.redhat.com/security/cve/cve-2014-3495 x_refsource_MISCx_transferred

Affected products

duplicity

==0.6.24

Matching in nixpkgs

pkgs.duplicity

Encrypted bandwidth-efficient backup using the rsync algorithm

nixos-unstable 3.0.7
- nixpkgs-unstable 3.0.7
- nixos-unstable-small 3.0.7

Package maintainers

@corngood David McFarland <corngood@gmail.com>

Does not affect current versions

Permalink CVE-2010-0737

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@pyrox0 ignored
2 packages
- jboss_mysql_jdbc
- jboss
5 months, 1 week ago
@pyrox0 accepted 5 months, 1 week ago
@LeSuisse dismissed 5 months, 1 week ago

A missing permission check was found in The CLI in …

A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0737 x_refsource_MISCx_transferred

Affected products

JBoss

==2.3.1

Ignored packages (2)

pkgs.jboss

Open Source J2EE application server

nixos-unstable 7.1.1.Final
- nixpkgs-unstable 7.1.1.Final
- nixos-unstable-small 7.1.1.Final

pkgs.jboss_mysql_jdbc

MySQL Connector/J

nixos-unstable 9.6.0
- nixpkgs-unstable 9.6.0
- nixos-unstable-small 9.6.0

Only affects up to version 2.3.1

Permalink CVE-2012-5558

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@pyrox0 ignored package smiley-sans 5 months, 1 week ago
@pyrox0 accepted 5 months, 1 week ago
@LeSuisse dismissed 5 months, 1 week ago

Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions …

Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the "administer smiley" permission to inject arbitrary web script or HTML via a smiley acronym.

References

http://drupal.org/node/1840892 x_refsource_MISCx_transferred
http://www.openwall.com/lists/oss-security/2012/11/20/4 x_refsource_MISCx_transferred
http://drupal.org/node/1840954 x_refsource_MISCx_transferred
http://drupal.org/node/1840956 x_refsource_MISCx_transferred

Affected products

Smiley

==6.x-1.x versions prior to 6.x-1.1

Smileys

==6.x-1.x versions prior to 6.x-1.1

Ignored packages (1)

pkgs.smiley-sans

Condensed and oblique Chinese typeface seeking a visual balance between the humanist and the geometric

nixos-unstable 2.0.1
- nixpkgs-unstable 2.0.1
- nixos-unstable-small 2.0.1

Does not apply to the font.

Permalink CVE-2014-3655

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse ignored
5 packages
- terraform-providers.keycloak
- python312Packages.python-keycloak
- python313Packages.python-keycloak
- python314Packages.python-keycloak
- terraform-providers.keycloak_keycloak
5 months, 1 week ago
@LeSuisse dismissed 5 months, 1 week ago

JBoss KeyCloak is vulnerable to soft token deletion via CSRF

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3655 x_refsource_MISCx_transferred
https://access.redhat.com/security/cve/cve-2014-3655 x_refsource_MISCx_transferred
https://snyk.io/vuln/SNYK-JAVA-ORGKEYCLOAK-30138 x_refsource_MISCx_transferred

Affected products

KeyCloak

==Fixed in version 1.1.0-Alpha1

Matching in nixpkgs

pkgs.keycloak

Identity and access management for modern applications and services

nixos-unstable 26.5.3
- nixpkgs-unstable 26.5.3
- nixos-unstable-small 26.5.3

Ignored packages (5)

pkgs.terraform-providers.keycloak

None

nixos-unstable 5.6.0
- nixpkgs-unstable 5.6.0
- nixos-unstable-small 5.6.0

pkgs.python312Packages.python-keycloak

None

pkgs.python313Packages.python-keycloak

Provides access to the Keycloak API

nixos-unstable 4.0.0
- nixpkgs-unstable 4.0.0
- nixos-unstable-small 4.0.0

pkgs.python314Packages.python-keycloak

Provides access to the Keycloak API

nixos-unstable 4.0.0
- nixpkgs-unstable 4.0.0
- nixos-unstable-small 4.0.0

pkgs.terraform-providers.keycloak_keycloak

None

nixos-unstable 5.6.0
- nixpkgs-unstable 5.6.0
- nixos-unstable-small 5.6.0

Package maintainers

@talyz Kim Lindberger <kim.lindberger@gmail.com>
@ngerstle Nicholas Gerstle <ngerstle@gmail.com>
@ap-1 Anish Pallati <i@anish.land>
@kritdass Krit Dass <dasskrit@gmail.com>
@NickCao Nick Cao <nickcao@nichi.co>
@jefferyoo Jeffery Oo <oojefferywm@proton.me>
@leona-ya Leona Maroni <nix@leona.is>

Current stable branch was never impacted

https://github.com/NixOS/nixpkgs/commit/efc7ecaf9c79f655737104ecabaea761afe81a7b

Permalink CVE-2026-2665

6.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Exploit Code Maturity (E): Proof-of-Concept (P)
Remediation Level (RL): Not Defined (X)
Report Confidence (RC): Reasonable (R)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse ignored
2 packages
- python312Packages.firebase-admin
- python313Packages.firebase-admin
5 months, 1 week ago
@LeSuisse dismissed 5 months, 1 week ago

huanzi-qch base-admin JSP Parser SysFileController.java upload unrestricted upload

A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea83596. Impacted is the function Upload of the file SysFileController.java of the component JSP Parser. Performing a manipulation of the argument File results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

References

VDB-346462 | huanzi-qch base-admin JSP Parser SysFileController.java upload unrestricted upload technical-descriptionvdb-entry
VDB-346462 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
Submit #753240 | https://github.com/huanzi-qch/base-admin base-admin v1.0 Upload any file third-party-advisory
https://github.com/huanzi-qch/base-admin/issues/38 issue-tracking
https://github.com/huanzi-qch/base-admin/issues/38#issue-3905100373 issue-trackingexploit
https://github.com/huanzi-qch/base-admin/ product

Affected products

base-admin

==57a8126bb3353a004f3c7722089e3b926ea83596

Ignored packages (2)

pkgs.python312Packages.firebase-admin

None

pkgs.python313Packages.firebase-admin

Firebase Admin Python SDK

nixos-unstable 7.1.0
- nixpkgs-unstable 7.1.0
- nixos-unstable-small 7.1.0

Not present in nixpkgs

Permalink CVE-2025-15114

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse ignored
5 packages
- flaresolverr
- tests.arrayUtilities.isDeclaredMap.sameScopeDeclareSingletonMap
- tests.arrayUtilities.isDeclaredArray.sameScopeDeclareSingletonArray
- tests.arrayUtilities.isDeclaredMap.previousScopeDeclareSingletonMapFails
- tests.arrayUtilities.isDeclaredArray.previousScopeDeclareSingletonArrayFails
5 months, 1 week ago
@LeSuisse dismissed 5 months, 1 week ago

Ksenia Security Lares 4.0 Home Automation 1.6 PIN Exposure Vulnerability

Ksenia Security Lares 4.0 Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication. Attackers can retrieve the PIN from the server response to bypass security measures and disable the alarm system without additional authentication.

References

Zero Science Lab Disclosure (ZSL-2025-5929) third-party-advisorytechnical-descriptionexploit
VulnCheck Advisory: Ksenia Security Lares 4.0 Home Automation 1.6 PIN Exposure Vulnerability third-party-advisory

Affected products

lares

==1.0.0.15
==1.6

Ksenia Security Lares 4.0 Home Automation

==1.0.0.15
==1.6

Ignored packages (5)

pkgs.flaresolverr

Proxy server to bypass Cloudflare protection

nixos-unstable 3.4.6
- nixpkgs-unstable 3.4.6
- nixos-unstable-small 3.4.6

pkgs.tests.arrayUtilities.isDeclaredMap.sameScopeDeclareSingletonMap

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.tests.arrayUtilities.isDeclaredArray.sameScopeDeclareSingletonArray

None

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.tests.arrayUtilities.isDeclaredMap.previousScopeDeclareSingletonMapFails

Wrapper around testers.testBuildFailure to simplify common use cases

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

pkgs.tests.arrayUtilities.isDeclaredArray.previousScopeDeclareSingletonArrayFails

Wrapper around testers.testBuildFailure to simplify common use cases

nixos-unstable -
- nixpkgs-unstable
- nixos-unstable-small

Not present in nixpkgs

Permalink CVE-2014-0163

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse ignored
6 packages
- python312Packages.openshift
- python313Packages.openshift
- python314Packages.openshift
- python312Packages.azure-mgmt-redhatopenshift
- python313Packages.azure-mgmt-redhatopenshift
- python314Packages.azure-mgmt-redhatopenshift
5 months, 1 week ago
@LeSuisse dismissed 5 months, 1 week ago

Openshift has shell command injection flaws due to unsanitized data …

Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0163 x_refsource_MISCx_transferred
https://access.redhat.com/security/cve/cve-2014-0163 x_refsource_MISCx_transferred

Affected products

Openshift

==through 2014-04-03

Matching in nixpkgs

pkgs.openshift

Build, deploy, and manage your applications with Docker and Kubernetes

nixos-unstable 4.19.0-202505210330
- nixpkgs-unstable 4.19.0-202505210330
- nixos-unstable-small 4.19.0-202505210330

Ignored packages (6)

pkgs.python312Packages.openshift

None

pkgs.python313Packages.openshift

Python client for the OpenShift API

nixos-unstable 0.13.2
- nixpkgs-unstable 0.13.2
- nixos-unstable-small 0.13.2

pkgs.python314Packages.openshift

Python client for the OpenShift API

nixos-unstable 0.13.2
- nixpkgs-unstable 0.13.2
- nixos-unstable-small 0.13.2

pkgs.python312Packages.azure-mgmt-redhatopenshift

None

pkgs.python313Packages.azure-mgmt-redhatopenshift

Microsoft Azure Red Hat Openshift Management Client Library for Python

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0

pkgs.python314Packages.azure-mgmt-redhatopenshift

Microsoft Azure Red Hat Openshift Management Client Library for Python

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0

Package maintainers

@moretea Maarten Hoogendoorn <maarten@moretea.nl>
@stehessel Stephan Heßelmann <stephan@stehessel.de>

Current stable branch was never impacted.

https://github.com/NixOS/nixpkgs/commit/ce3dd652234318508da37f8cbc7d69ace7b098ef

Dismissed suggestions

References

Affected products

Matching in nixpkgs

pkgs.boinc

pkgs.boinc-headless

pkgs.boinctui

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.chromedriver

pkgs.google-chrome

pkgs.electron-chromedriver

pkgs.curl-impersonate-chrome

pkgs.undetected-chromedriver

pkgs.electron-chromedriver_33

pkgs.electron-chromedriver_34

pkgs.electron-chromedriver_35

pkgs.electron-chromedriver_36

pkgs.electron-chromedriver_37

pkgs.electron-chromedriver_38

pkgs.electron-chromedriver_39

pkgs.electron-chromedriver_40

pkgs.netflix

pkgs.mkchromecast

pkgs.chrome-export

pkgs.go-chromecast

pkgs.xf86videoopenchrome

pkgs.chrome-token-signing

pkgs.chrome-pak-customizer

pkgs.xf86-video-openchrome

pkgs.xorg.xf86videoopenchrome

pkgs.ocamlPackages.chrome-trace

pkgs.noto-fonts-monochrome-emoji

pkgs.python312Packages.pychromecast

pkgs.python313Packages.pychromecast

pkgs.python314Packages.pychromecast

pkgs.ocamlPackages_latest.chrome-trace

pkgs.python312Packages.undetected-chromedriver

pkgs.python313Packages.undetected-chromedriver

pkgs.python314Packages.undetected-chromedriver

pkgs.grafanaPlugins.ventura-psychrometric-panel

Package maintainers

References

Affected products

pkgs.vtsls

References

Affected products

Matching in nixpkgs

pkgs.duplicity

Package maintainers

References

Affected products

pkgs.jboss

pkgs.jboss_mysql_jdbc

References

Affected products

pkgs.smiley-sans

References

Affected products

Matching in nixpkgs

pkgs.keycloak

pkgs.terraform-providers.keycloak

pkgs.python312Packages.python-keycloak

pkgs.python313Packages.python-keycloak

pkgs.python314Packages.python-keycloak

pkgs.terraform-providers.keycloak_keycloak

Package maintainers

References

Affected products

pkgs.python312Packages.firebase-admin

pkgs.python313Packages.firebase-admin

References

Affected products

pkgs.flaresolverr

pkgs.tests.arrayUtilities.isDeclaredMap.sameScopeDeclareSingletonMap

pkgs.tests.arrayUtilities.isDeclaredArray.sameScopeDeclareSingletonArray

pkgs.tests.arrayUtilities.isDeclaredMap.previousScopeDeclareSingletonMapFails

pkgs.tests.arrayUtilities.isDeclaredArray.previousScopeDeclareSingletonArrayFails