From dbacbfb117bd9db796e1fb72ec59ba94bf1ee428 Mon Sep 17 00:00:00 2001
From: Michael Daniels <mdaniels5757@gmail.com>
Date: Sat, 29 Nov 2025 14:51:51 -0500
Subject: [PATCH] binserve: mark vulnerable

See https://redirect.github.com/mufeedvh/binserve/issues/49

Web servers are quite security-sensitive, so we should warn our users that
this one is unmaintained.
---
 pkgs/by-name/bi/binserve/package.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/by-name/bi/binserve/package.nix b/pkgs/by-name/bi/binserve/package.nix
index dc4235c56c44..f069f7341bb2 100644
--- a/pkgs/by-name/bi/binserve/package.nix
+++ b/pkgs/by-name/bi/binserve/package.nix
@@ -25,6 +25,11 @@ rustPlatform.buildRustPackage rec {
   meta = with lib; {
     description = "Fast production-ready static web server";
     homepage = "https://github.com/mufeedvh/binserve";
+    knownVulnerabilities = [
+      "CVE-2025-4432"
+      "CVE-2024-32650"
+      "This web server is unmaintained. Consider using maintained alternatives instead."
+    ];
     longDescription = ''
       A fast production-ready static web server with TLS
       (HTTPS), routing, hot reloading, caching, templating, and security in a