Maintainer Mode
Sign in with GitHub

auto-changelog

auto-changelog 2.5.0 · pkgs/by-name/au/auto-changelog/package.nix
Sign in to subscribe
Health
Risk
risk 39 high
  • +25 1 open advisory
  • +8 NIXPKGS-2026-2909 has a public exploit (CISA)
  • +6 no maintainer
Version
2.5.0 no newer release known to repology
Channels
master 2.5.0 · nixos-unstable 2.5.0 · nixos-26.05 2.5.0 no channel is behind master
Hydra
succeeded 2d ago
Advisories
NIXPKGS-2026-2909 high 8.4 public exploit EPSS 0.2% auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF · #570887
CVE-2026-12171
Packaging
not read yet: the next index sweep reads it
Maintainers
none
Pull requests 0
None open.
Issues 1
auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF 1.severity: security
#570887 by nixpkgs-security-tracker · opened 10d ago · 0 comments