Vulnerabilities

TI-2025-34598 CVE-2025-54864

Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins

LOW 37

Hydra is a continuous integration service for Nix based projects.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00405 Published 2025-08-12 No fix listed CWE-306

TI-2025-34554 CVE-2025-54800

LOW 31

Hydra is a continuous integration service for Nix based projects.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2025-08-12 No fix listed CWE-79

TI-2025-23506 CVE-2025-32435

LOW 13

Hydra is a Continuous Integration service for Nix based projects.

CVSS 3.1LOW 2.6 Network Low privileges User interaction EPSS 0.00362 Published 2025-04-15 Fixed in 8d75026 CWE-95

TI-2024-30161 CVE-2024-45049

MEDIUM 40

Hydra is a Continuous Integration service for Nix based projects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00619 Published 2024-08-27 No fix listed CWE-306

TI-2024-21538 CVE-2024-32657

LOW 31

Hydra is a Continuous Integration service for Nix based projects.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2024-04-22 Fixed in 23.11 CWE-79