Nixpkgs security tracker

Permalink CVE-2026-28076

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse ignored package guff 4 months, 4 weeks ago
@LeSuisse dismissed 4 months, 4 weeks ago

WordPress Guff theme <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Frenify Guff guff allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Guff: from n/a through <= 1.0.1.

References

https://patchstack.com/database/Wordpress/Theme/guff/vulnerability/wordpress-gu… vdb-entry

Affected products

guff

=<<= 1.0.1

Ignored packages (1)

pkgs.guff

Plot device

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0

Not present in nixpkgs

Permalink CVE-2026-29081

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse ignored
3 packages
- nixos-artwork.wallpapers.catppuccin-frappe
- nixos-artwork.wallpapers.nineish-catppuccin-frappe
- nixos-artwork.wallpapers.nineish-catppuccin-frappe-alt
4 months, 4 weeks ago
@LeSuisse dismissed 4 months, 4 weeks ago

Frappe: Possibility of SQL Injection due to improper fieldname sanitization

Frappe is a full-stack web application framework. Prior to versions 14.100.1 and 15.100.0, an endpoint was vulnerable to SQL injection through specially crafted requests, which would allow a malicious actor to extract sensitive information. This issue has been patched in versions 14.100.1 and 15.100.0.

References

https://github.com/frappe/frappe/security/advisories/GHSA-w3g7-m7xr-2w38 x_refsource_CONFIRM

Affected products

frappe

==< 15.100.0
==< 14.100.1

Ignored packages (3)

pkgs.nixos-artwork.wallpapers.catppuccin-frappe

Catppuccin Frappé colorscheme wallpaper for NixOS

nixos-unstable 2024-02-15
- nixpkgs-unstable 2024-02-15
- nixos-unstable-small 2024-02-15

pkgs.nixos-artwork.wallpapers.nineish-catppuccin-frappe

Catppuccin Frappe wallpaper for Nix inspired by simpler times

nixos-unstable 2025-01-27
- nixpkgs-unstable 2025-01-27
- nixos-unstable-small 2025-01-27

pkgs.nixos-artwork.wallpapers.nineish-catppuccin-frappe-alt

Alternative Catppuccin Frappe wallpaper for Nix inspired by simpler times

nixos-unstable 2025-01-27
- nixpkgs-unstable 2025-01-27
- nixos-unstable-small 2025-01-27

Not present in nixpkgs

Permalink CVE-2026-27337

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse ignored package haskellPackages.monad-chronicle 4 months, 4 weeks ago
@LeSuisse dismissed 4 months, 4 weeks ago

WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme chronicle allows PHP Local File Inclusion.This issue affects Chronicle - Lifestyle Magazine & Blog WordPress Theme: from n/a through <= 1.0.

References

https://patchstack.com/database/Wordpress/Theme/chronicle/vulnerability/wordpre… vdb-entry

Affected products

chronicle

=<<= 1.0

Ignored packages (1)

pkgs.haskellPackages.monad-chronicle

These as a transformer, ChronicleT

nixos-unstable 1.1
- nixpkgs-unstable 1.1
- nixos-unstable-small 1.1

Not present in nixpkgs

Dismissed

(exclusively hosted service)

Permalink CVE-2026-23651

6.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Exploit Code Maturity (E): Proof-of-Concept (P)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 4 months, 4 weeks ago Activity log

Created suggestion 4 months, 4 weeks ago

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

References

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability patchvendor-advisory

Affected products

Microsoft ACI Confidential Containers

==-

Dismissed

(exclusively hosted service)

Permalink CVE-2026-21536

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 4 months, 4 weeks ago Activity log

Created suggestion 4 months, 4 weeks ago

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

References

Microsoft Devices Pricing Program Remote Code Execution Vulnerability patchvendor-advisory

Affected products

Microsoft Devices Pricing Program

==-

Dismissed

(exclusively hosted service)

Permalink CVE-2026-26122

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 4 months, 4 weeks ago Activity log

Created suggestion 4 months, 4 weeks ago

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

References

Microsoft ACI Confidential Containers Information Disclosure Vulnerability patchvendor-advisory

Affected products

Microsoft ACI Confidential Containers

==-

Dismissed

(exclusively hosted service)

Permalink CVE-2026-26124

6.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Exploit Code Maturity (E): Proof-of-Concept (P)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 4 months, 4 weeks ago Activity log

Created suggestion 4 months, 4 weeks ago

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

References

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability patchvendor-advisory

Affected products

Microsoft ACI Confidential Containers

==-

Dismissed

(exclusively hosted service)

Permalink CVE-2026-26125

8.6 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Exploit Code Maturity (E): Proof-of-Concept (P)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 4 months, 4 weeks ago Activity log

Created suggestion 4 months, 4 weeks ago

Payment Orchestrator Service Elevation of Privilege Vulnerability

References

Payment Orchestrator Service Elevation of Privilege Vulnerability patchvendor-advisory

Affected products

Payment Orchestrator Service

==-

Permalink CVE-2025-40895

4.8 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 5 months ago by @LeSuisse Activity log

Created suggestion 5 months ago
@LeSuisse ignored
12 packages
- cmctl
- scmccid
- pcmciaUtils
- pcmciautils
- rocmPackages.clang
- haskellPackages.mcmc
- rocmPackages_6.clang
- rocmPackages.llvm.clang
- rocmPackages.llvm.rocmcxx
- rocmPackages_6.llvm.clang
- haskellPackages.mcmc-types
- rocmPackages_6.llvm.rocmcxx
5 months ago
@LeSuisse dismissed 5 months ago

HTML injection in Sensor Map in CMC before 25.6.0

A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties. A malicious authenticated user with administrator privileges on a Guardian connected to a CMC can edit the Guardian's properties to inject HTML tags. If the Sensor Map functionality is enabled in the CMC, when a victim CMC user interacts with it, then the injected HTML may render in their browser, enabling phishing and possibly open redirect attacks. Full XSS exploitation and direct information disclosure are prevented by the existing input validation and Content Security Policy configuration.

References

https://security.nozominetworks.com/NN-2025:17-01

Affected products

CMC

<25.6.0

Ignored packages (12)

pkgs.cmctl

Command line utility to interact with a cert-manager instalation on Kubernetes

nixos-unstable 2.4.1
- nixpkgs-unstable 2.4.1
- nixos-unstable-small 2.4.1

pkgs.scmccid

PCSC drivers for linux, for the SCM SCR3310 v2.0 card and others

nixos-unstable 5.0.35
- nixpkgs-unstable 5.0.35
- nixos-unstable-small 5.0.35

pkgs.pcmciaUtils

None

nixos-unstable 018
- nixpkgs-unstable 018
- nixos-unstable-small 018

pkgs.pcmciautils

None

nixos-unstable 018
- nixpkgs-unstable 018
- nixos-unstable-small 018

pkgs.rocmPackages.clang

None

pkgs.haskellPackages.mcmc

Sample from a posterior using Markov chain Monte Carlo

nixos-unstable 0.8.3.1
- nixpkgs-unstable 0.8.3.1
- nixos-unstable-small 0.8.3.1

pkgs.rocmPackages_6.clang

None

pkgs.rocmPackages.llvm.clang

None

pkgs.rocmPackages.llvm.rocmcxx

None

pkgs.rocmPackages_6.llvm.clang

None

pkgs.haskellPackages.mcmc-types

Common types for sampling

nixos-unstable 1.0.3
- nixpkgs-unstable 1.0.3
- nixos-unstable-small 1.0.3

pkgs.rocmPackages_6.llvm.rocmcxx

None

Not present in nixpkgs

Permalink CVE-2025-40894

4.4 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 5 months ago by @LeSuisse Activity log

Created suggestion 5 months ago
@LeSuisse ignored
29 packages
- cmctl
- scmccid
- adguardian
- pcmciaUtils
- pcmciautils
- rocmPackages.clang
- haskellPackages.mcmc
- rocmPackages_6.clang
- rocmPackages.llvm.clang
- rocmPackages.llvm.rocmcxx
- rocmPackages_6.llvm.clang
- haskellPackages.mcmc-types
- rocmPackages_6.llvm.rocmcxx
- python312Packages.aioguardian
- python313Packages.aioguardian
- python314Packages.aioguardian
- python312Packages.pygitguardian
- python313Packages.pygitguardian
- python314Packages.pygitguardian
- python312Packages.django-guardian
- python313Packages.django-guardian
- python314Packages.django-guardian
- home-assistant-component-tests.guardian
- tests.home-assistant-component-tests.guardian
- python312Packages.djangorestframework-guardian
- python313Packages.djangorestframework-guardian
- python314Packages.djangorestframework-guardian
- python312Packages.djangorestframework-guardian2
- python313Packages.djangorestframework-guardian2
5 months ago
@LeSuisse dismissed 5 months ago

HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0

A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter. A malicious authenticated user with the required privileges could edit a node label to inject HTML tags. If the system is configured to use the Alerted Nodes Dashboard, and alerts are reported for the affected node, then the injected HTML may render in the browser of a victim user interacting with it, enabling phishing and possibly open redirect attacks. Full XSS exploitation and direct information disclosure are prevented by the existing input validation and Content Security Policy configuration.