Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority CRITICAL 87
A heap-based buffer overflow flaw was found in the rsync daemon.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.72514 · Published 2025-01-15 · Fixed in 3.4.1-2.el10 CWE-122
Priority HIGH 77
Tandoor Recipes is a recipe manager than can be installed with the Nix package manager.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00508 · Published 2026-01-19 · Fixed in 26.05 CWE-538
Priority HIGH 72
A flaw was found in rsync which could be triggered when rsync compares file checksums.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08641 · Published 2025-01-14 · Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908
Priority HIGH 66
A flaw was found in rsync.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04646 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-22
Priority HIGH 66
A path traversal vulnerability exists in rsync.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02259 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.0.6-12.el6_10.2 +11 CWE-22
Priority MEDIUM 63
A flaw was found in rsync.
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.01789 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.2.5-7.el9_8 +2 CWE-390
Priority MEDIUM 58
The NixOs Odoo package is an open source ERP and CRM system.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.10328 · Published 2026-02-02 · Fixed in 25.11 CWE-306
Priority MEDIUM 49
A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders.
CVSS 3.1LOW 3.2· Local · No auth · No interaction · EPSS 0.00139 · Published 2025-06-27 · Fixed in 2.24.15, 2.26.4 +2 CWE-367
Priority MEDIUM 42
Nix is a package manager for Linux and other Unix systems.
CVSS 3.1CRITICAL 9.1· Network · Low privileges · User interaction · EPSS 0.00602 · Published 2024-09-10 · Fixed in 2.24.6 CWE-22
Priority MEDIUM 40
Nix is a package manager for Linux and other Unix systems.
CVSS 3.1CRITICAL 9.0· Local · No auth · No interaction · EPSS 0.00197 · Published 2026-04-08 · Fixed in 2.28.6, 2.29.3 +5 CWE-61
Priority MEDIUM 40
Hydra is a Continuous Integration service for Nix based projects.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00619 · Published 2024-08-27 · No fix listed CWE-306
Priority LOW 39
make-initrd-ng is a tool for copying binaries and their dependencies.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00186 · Published 2025-04-15 · No fix listed CWE-378
Priority LOW 38
Nixpkgs is a collection of software packages that can be installed with the Nix package manager.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00153 · Published 2026-07-15 · Fixed in 25.11, 26.05 CWE-276
Priority LOW 37
Hydra is a continuous integration service for Nix based projects.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00405 · Published 2025-08-12 · No fix listed CWE-306
Priority LOW 36
Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.
CVSS 3.1HIGH 8.0· Local · No auth · No interaction · EPSS 0.00155 · Published 2026-10-14 · Fixed in 2.28.8, 2.30.6 +3 CWE-696
Priority LOW 35
calamares-nixos-extensions provides Calamares branding and modules for NixOS, a distribution of GNU/Linux.
CVSS 3.1HIGH 7.8· Local · No auth · No interaction · EPSS 0.00131 · Published 2024-08-15 · Fixed in 0.3.17 CWE-256
Priority LOW 34
An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2.
CVSS 3.1HIGH 7.5· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2026-05-05 · Fixed in 2.28.7, 2.29.4 +8 CWE-674
Priority LOW 34
calamares-nixos-extensions provides Calamares branding and modules for NixOS, a distribution of GNU/Linux.
CVSS 3.1HIGH 7.9· Local · No auth · No interaction · EPSS 0.00263 · Published 2023-06-29 · No fix listed CWE-200
Priority LOW 34
Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00433 · Published 2019-10-09 · No fix listed CWE-276
Priority LOW 34
NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executing docker commands.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00363 · Published 2017-04-04 · No fix listed
Priority LOW 33
Nix is a package manager for Linux and other Unix systems.
CVSS 3.1HIGH 7.9· Local · Low privileges · No interaction · EPSS 0.00147 · Published 2025-07-14 · No fix listed CWE-271
Priority LOW 32
Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00249 · Published 2026-10-14 · Fixed in 2.28.8, 2.30.6 +3 CWE-190
Priority LOW 31
An issue was discovered in Nix before 2.34.7.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-05-05 · Fixed in 2.28.7, 2.29.4 +5 CWE-36
Priority LOW 31
Hydra is a continuous integration service for Nix based projects.
CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.00214 · Published 2025-08-12 · No fix listed CWE-79
Load more
THREATIST.IORead the docs