From c3e99a04af018005ec22f8faf83b4e865a7185f0 Mon Sep 17 00:00:00 2001
From: Thomas Gerbet <thomas.gerbet@3ds.com>
Date: Tue, 11 Aug 2026 09:35:57 +0000
Subject: [PATCH] ladybird: mark vulnerable to CVE-2026-58592

Does not look like it was fixed upstream.
We also appears to be missing proper maintenance within nixpkgs,
the last update has not been backported to 26.05.

Closes #538210
---
 pkgs/by-name/la/ladybird/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/la/ladybird/package.nix b/pkgs/by-name/la/ladybird/package.nix
index 060f4a37ff83..fe41a6487a06 100644
--- a/pkgs/by-name/la/ladybird/package.nix
+++ b/pkgs/by-name/la/ladybird/package.nix
@@ -220,5 +220,8 @@ stdenv.mkDerivation (finalAttrs: {
     ];
     mainProgram = "Ladybird";
     broken = stdenv.hostPlatform.isDarwin;
+    knownVulnerabilities = [
+      "CVE-2026-58592"
+    ];
   };
 })