wazuh-dashboard

MEDIUM

maintainer madara125 2 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a prebuilt RPM from the official Wazuh domain, which is not on the whitelist but plausibly legitimate; however, the unverifiable binary artifact from a non-standard host poses a supply-chain risk if the source were silently swapped, warranting a medium severity due to potential execution of unreviewed code.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 "https://packages.wazuh.com/4.x/yum/${pkgname}-${_prodver}.x86_64.rpm"

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt RPM from the official Wazuh domain, which is not on the whitelist but plausibly legitimate; however, the unverifiable binary artifact from a non-standard host poses a supply-chain risk if the source were silently swapped, warranting a medium severity due to potential execution of unreviewed code.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Jesus Martin Ortega Martinez (madara125) <martin.ortega.arashi@gmail.com><jortega@condorbs.net>
    
      2# Contributor: Kevin Muñoz (MrHacker) <kmunoz@condorbs.net><david.munozm@proton.me>
    
      3pkgname=wazuh-dashboard
    
      4pkgver=4.14.9
    
      5pkgrel=1
    
      6_remRevision=1
    
      7_prodver=${pkgver}-${_remRevision}
    
      8pkgdesc='Wazuh Dashboard for Arch Linux'
    
      9arch=('x86_64')
    
      10url='https://wazuh.com/'
    
      11license=('gpl2')
    
      12groups=("wazuh-siem")
    
      13depends=(
    
      14  'libcap'
    
      15)
    
      16optdepends=(
    
      17)
    
      18
    
      19source=(
    
      20  "https://packages.wazuh.com/4.x/yum/${pkgname}-${_prodver}.x86_64.rpm"
    
      21)
    
      22
    
      23sha512sums=('1ddb6e286010f42398f1401e11b1b9d68b13944db6e263151d5ab1697c1b3048624da7cb89c26954b49bbc2678f8ce03c39007f5483758133f0262eb7a68901d')
    
      24
    
      25install=$pkgname.install
    
      26
    
      27package() {
    
      28
    
      29  #Setup
    
      30  cd $pkgdir
    
      31  mv $srcdir/etc .
    
      32  mv $srcdir/usr .
    
      33
    
      34  #Set systemd service file perms
    
      35}
    
      36

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,7 +1,7 @@
 # Maintainer: Jesus Martin Ortega Martinez (madara125) <martin.ortega.arashi@gmail.com><jortega@condorbs.net>
 # Contributor: Kevin Muñoz (MrHacker) <kmunoz@condorbs.net><david.munozm@proton.me>
 pkgname=wazuh-dashboard
-pkgver=4.14.3
+pkgver=4.14.9
 pkgrel=1
 _remRevision=1
 _prodver=${pkgver}-${_remRevision}
@@ -20,7 +20,7 @@
   "https://packages.wazuh.com/4.x/yum/${pkgname}-${_prodver}.x86_64.rpm"
 )
 
-sha512sums=('8c1e8d6d7ceaf62c86005655d14686a1a5b88aa159dd90a28d60837242067f9b5c4ee7cc9f15c7747361581d8b411753c20c89f9a1888fffffb68561d435e0a0')
+sha512sums=('1ddb6e286010f42398f1401e11b1b9d68b13944db6e263151d5ab1697c1b3048624da7cb89c26954b49bbc2678f8ce03c39007f5483758133f0262eb7a68901d')
 
 install=$pkgname.install
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Medium	2
2026-10-16 01:13:57	Medium	2
2026-06-19 19:07:35	Clean	2
2026-06-19 18:54:17	Clean	2
2026-06-18 16:11:54	Medium	1