CVE-2026-39860 Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination

[
  {
    "vendor": "NixOS",
    "product": "nix",
    "versions": [
      {
        "version": ">= 2.21, < 2.28.6",
        "status": "affected"
      },
      {
        "version": ">= 2.29.0, < 2.29.3",
        "status": "affected"
      },
      {
        "version": ">= 2.30.0, < 2.30.4",
        "status": "affected"
      },
      {
        "version": ">= 2.31.0, < 2.31.4",
        "status": "affected"
      },
      {
        "version": ">= 2.32.0, < 2.32.7",
        "status": "affected"
      },
      {
        "version": ">= 2.33.0, < 2.33.4",
        "status": "affected"
      },
      {
        "version": ">= 2.34.0, < 2.34.5",
        "status": "affected"
      },
      {
        "version": ">= 2.20.5, <= 2.20.9",
        "status": "affected"
      },
      {
        "version": ">= 2.19.4, <= 2.19.7",
        "status": "affected"
      },
      {
        "version": ">= 2.18.2, <= 2.18.9",
        "status": "affected"
      }
    ]
  }
]