gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

olivetin: add CVE-2026-31817 to knownVulnerabilities (#498868)

Browse Source
This commit is contained in:
Felix Bargfeldt
2026-03-11 18:45:21 +00:00
committed by GitHub
parent 5d96240a58 0cca63b7da
commit 7ea6bc2f4b
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/by-name/ol/olivetin/package.nix
+4 -3
View File
@@ -145,12 +145,13 @@ buildGoModule (
knownVulnerabilities = [
"CVE-2026-27626: OS Command Injection via password argument type and webhook JSON extraction bypasses shell safety checks"
"CVE-2026-28342: Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint"
"CVE-2026-30223: JWT Audience Validation Bypass in Local Key and HMAC Modes"
"CVE-2026-28789: Unauthenticated DoS via concurrent map writes in OAuth2 state handling"
"CVE-2026-30224: Session Fixation - Logout Fails to Invalidate Server-Side Session"
"CVE-2026-28790: Unauthenticated Action Termination via KillAction When Guests Must Login"
"CVE-2026-30233: View permission not being checked when returning dashboards"
"CVE-2026-30223: JWT Audience Validation Bypass in Local Key and HMAC Modes"
"CVE-2026-30224: Session Fixation - Logout Fails to Invalidate Server-Side Session"
"CVE-2026-30225: RestartAction always runs actions as guest"
"CVE-2026-30233: View permission not being checked when returning dashboards"
"CVE-2026-31817: Unsafe parsing of UniqueTrackingId can be used to write files"
];
};
}