CVE-2026-54634

creationtimestamp| type| source ---|---|--- 2026-09-19 00:05:04+00:00| seen| https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3mvtf4gaxie2h...

CVE-2026-86090

creationtimestamp| type| source ---|---|--- 2026-09-06 06:11:54+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutdkg5dke2l 2026-09-06 07:07:56+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutgolfbcq2x 2026-09-10 03:30:04+00:00| seen|...

CVE-2026-86091

creationtimestamp| type| source ---|---|--- 2026-09-06 06:11:54+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutdkg5dke2l 2026-09-06 07:07:56+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mutgolfbcq2x 2026-09-09 11:50:24+00:00| seen|...

CVE-2026-78002

creationtimestamp| type| source ---|---|--- 2026-09-03 13:35:41+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mumkx6urax2z 2026-09-03 15:07:55+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mumq447ubq24...

CVE-2026-82633

creationtimestamp| type| source ---|---|--- 2026-09-03 13:35:40+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mumkx6dhng27...

CVE-2026-61478

creationtimestamp| type| source ---|---|--- 2026-08-11 11:15:43+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mssifqhusk25...

CVE-2026-61828: Incorrect Default Permissions

Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...

CVE-2026-42046

creationtimestamp| type| source ---|---|--- 2026-05-25 13:40:12+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mmom4bm7c32p...

Nixpkgs 安全漏洞

Nixpkgs is a collection of over 100,000 software packages open source from NixOS. It can be installed using the Nix package manager. Nixpkgs versions prior to 21.11, 25.11, and 26.05 have security vulnerabilities. These vulnerabilities stem from the database manager being exposed publicly without...

GHSA-7CQ3-MHXQ-W946

creationtimestamp| type| source ---|---|--- 2026-01-17 12:45:03+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mcmndtqqbw2s...

GHSA-28CF-XVCF-HW6M

creationtimestamp| type| source ---|---|--- 2026-01-17 12:45:03+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mcmndtqqbw2s...

CVE-2025-34451

creationtimestamp| type| source ---|---|--- 2026-01-17 12:06:13+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mcml6ev6c32v 2026-01-17 13:39:19+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mcmqeuwkfo2r...

CVE-2025-7039

creationtimestamp| type| source ---|---|--- 2025-11-06 08:05:06+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m4x44wwmum2z...

CVE-2025-11677

creationtimestamp| type| source ---|---|--- 2025-11-02 11:32:23+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m4nftvzd3u2z 2025-11-10 20:37:37+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m5ci27wgej2z...

CVE-2025-59800

creationtimestamp| type| source ---|---|--- 2025-10-22 21:32:43+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m3ssbbtafa2q 2026-01-28 12:05:17+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdiaarqtys2s...

CVE-2024-47174

Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, did not verify TLS certificates on HTTPS connections. This could lead to connection details such as full URLs or credentials leaking in case of a man-in-the-middle MITM...

CVE-2024-47174

Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, did not verify TLS certificates on HTTPS connections. This could lead to connection details such as full URLs or credentials leaking in case of a man-in-the-middle MITM...

CVE-2024-47174 Credential leak when credentials are used with `<nix/fetchurl.nix>`

Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, did not verify TLS certificates on HTTPS connections. This could lead to connection details such as full URLs or credentials leaking in case of a man-in-the-middle MITM...

CVE-2024-47174

Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, did not verify TLS certificates on HTTPS connections. This could lead to connection details such as full URLs or credentials leaking in case of a man-in-the-middle MITM...

CVE-2024-47174 Credential leak when credentials are used with `<nix/fetchurl.nix>`

Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, did not verify TLS certificates on HTTPS connections. This could lead to connection details such as full URLs or credentials leaking in case of a man-in-the-middle MITM...