Skip to content
OpenAdvisories

Package · Hackage

cabal-install

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Unscored —
    HSEC-2025-0005

    cabal-install dependency confusion

    # `cabal-install` dependency confusion For **cabal-install < 3.4.0.0** and where multiple repositories are configured, the resolver picks the highest available version across all repositories. Where a package is only defined in a private repository, this beha…

    cabal-install Hackage
  • Unscored —
    HSEC-2023-0015

    cabal-install uses expired key policies

    # cabal-install uses expired key policies A problem was recently discovered in `cabal-install`'s implementation of the Hackage Security protocol that would allow an attacker who was in possession of a revoked private key and who could perform a man-in-the-mid…

    cabal-install Hackage