From 0f8e2789ccd1313dcda1919ba706bac591a8995f Mon Sep 17 00:00:00 2001 From: Sizhe Zhao Date: Tue, 10 Feb 2026 16:02:59 +0800 Subject: [PATCH 1/2] wechat: add linux known CWE-78 vulnerability --- pkgs/by-name/we/wechat/package.nix | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/pkgs/by-name/we/wechat/package.nix b/pkgs/by-name/we/wechat/package.nix index 4fe5afe4f9d3..546fda69a0d8 100644 --- a/pkgs/by-name/we/wechat/package.nix +++ b/pkgs/by-name/we/wechat/package.nix @@ -23,6 +23,12 @@ let "aarch64-linux" "x86_64-linux" ]; + knownVulnerabilities = lib.optional stdenvNoCC.hostPlatform.isLinux '' + CWE-78: Clicking on a file attachment whose name contains backtick-quoted + commands will cause it to be executed. + + Reference: https://archive.ph/A5McZ (Chinese) + ''; }; sources = From 538e124c90248721f4601ea58b15d78af29c7d19 Mon Sep 17 00:00:00 2001 From: Sizhe Zhao Date: Tue, 10 Feb 2026 16:14:10 +0800 Subject: [PATCH 2/2] wechat-uos: add linux known CWE-78 vulnerability --- pkgs/by-name/we/wechat-uos/package.nix | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/pkgs/by-name/we/wechat-uos/package.nix b/pkgs/by-name/we/wechat-uos/package.nix index f6c89f75e50e..2438b13e452d 100644 --- a/pkgs/by-name/we/wechat-uos/package.nix +++ b/pkgs/by-name/we/wechat-uos/package.nix @@ -194,6 +194,14 @@ let xddxdd ]; mainProgram = "wechat-uos"; + knownVulnerabilities = [ + '' + CWE-78: Clicking on a file attachment whose name contains backtick-quoted + commands will cause it to be executed. + + Reference: https://archive.ph/A5McZ (Chinese) + '' + ]; }; }; in