headplane

headplane 0.7.1 · pkgs/by-name/he/headplane/package.nix

Health

Risk

risk 22 medium

+13 1 advisory fixed in master, still in nixos-26.05
+8 0.7.1 is behind upstream 0.8.1
+1 no versionCheckHook

Version

0.7.1 0.8.1 available

Channels

master 0.7.1 · nixos-unstable 0.7.1 · nixos-26.05 0.6.2 master is ahead of nixos-26.05

Hydra

succeeded 3d ago

Advisories

NIXPKGS-2026-1887 high 8.1 EPSS 0.6% Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/user · #529814

CVE-2026-46484 · fixed in 0.7.0-beta.3 in master · needs backport: nixos-26.05 has 0.6.2

Packaging

no versionCheckHook

Packagewhat each field means

Description

Feature-complete Web UI for Headscale

Homepage

https://github.com/tale/headplane

Changelog

https://github.com/tale/headplane/releases/tag/v0.7.1

License

MIT

Platforms

25 platforms: Linux, Darwin

Main program

headplane

Source provenance

not set: built from source

Outputs

out

Status

not broken, not insecure, free

Position

pkgs/by-name/he/headplane/package.nix:112

Maintainers

igor-ramazanov, StealthBadger747

Version bumps 1

all open bumps

headplane: 0.7.1 -> 0.8.1

#574656 by SuperSandro2000 · opened 1d ago · checks pass

Pull requests 3

headplane: 0.7.1 -> 0.8.1

#574656 by SuperSandro2000 · opened 1d ago · checks pass

[release-26.05] headscale: 0.28.0 -> 0.29.3, headplane: 0.6.2 -> 0.7.0

#562569 by hatch01 · opened 5w ago · checks pass

headplane: allow freeformType in settings

#555876 by bendlas · opened 7w ago · checks pass

Closed or merged in the last 60 days 6

backport-537576-538802-to-release-26.05

#562570 by hatch01 · closed 5w ago

[Backport release-26.05] headplane: 0.6.2 -> 0.6.3

#562457 by nixpkgs-ci · closed 5w ago

headplane: 0.7.0 -> 0.7.1

#562321 by SuperSandro2000 · merged 5w ago

[26.05] pnpm_10_latest: init at 10.34.5, migrate consumers

#558969 by geri1701 · merged 2w ago

headplane: 0.6.3 -> 0.7.0, inherit headplane-agent from headplane, nixos/headplane: clean up deprecated options

#538802 by SuperSandro2000 · merged 3mo ago

headplane: 0.6.2 -> 0.6.3

#537576 by SuperSandro2000 · merged 3mo ago

Issues 1

Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/user 1.severity: security

#529814 by nixpkgs-security-tracker · opened 4mo ago · 0 comments