gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

olivetin: sort knownVulnerabilities

Browse Source
This commit is contained in:
Defelo
2026-03-11 14:06:13 +01:00
parent b271d4716b
commit d22ebf086f
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/by-name/ol/olivetin/package.nix
+3 -3
View File
@@ -145,12 +145,12 @@ buildGoModule (
knownVulnerabilities = [
"CVE-2026-27626: OS Command Injection via password argument type and webhook JSON extraction bypasses shell safety checks"
"CVE-2026-28342: Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint"
"CVE-2026-30223: JWT Audience Validation Bypass in Local Key and HMAC Modes"
"CVE-2026-28789: Unauthenticated DoS via concurrent map writes in OAuth2 state handling"
"CVE-2026-30224: Session Fixation - Logout Fails to Invalidate Server-Side Session"
"CVE-2026-28790: Unauthenticated Action Termination via KillAction When Guests Must Login"
"CVE-2026-30233: View permission not being checked when returning dashboards"
"CVE-2026-30223: JWT Audience Validation Bypass in Local Key and HMAC Modes"
"CVE-2026-30224: Session Fixation - Logout Fails to Invalidate Server-Side Session"
"CVE-2026-30225: RestartAction always runs actions as guest"
"CVE-2026-30233: View permission not being checked when returning dashboards"
];
};
}