Skip to content

chore: update flake.lock & sources (2026-07-18)#103

Merged
Reputable2772 merged 1 commit into
masterfrom
flake-update/2026-29
Jul 18, 2026
Merged

chore: update flake.lock & sources (2026-07-18)#103
Reputable2772 merged 1 commit into
masterfrom
flake-update/2026-29

Conversation

@Reputable2772

Copy link
Copy Markdown
Owner

Automated Pull Request for Week 29

Flakes Changelog:

• Updated input 'git-hooks':
    'github:cachix/git-hooks.nix/bca82caa46d5ec0f5d422c61fb1e30bc51313cbe' (2026-07-02)
  → 'github:cachix/git-hooks.nix/43b3c1ab9d40fb1dbb008f451988a91e375825e9' (2026-07-17)
• Updated input 'home-manager':
    'github:nix-community/home-manager/2afec152df4e284d264f8489d16004c264aebf4c' (2026-07-11)
  → 'github:nix-community/home-manager/460108009ca1ff69ca2ff19079ca2c838d6e3080' (2026-07-18)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/96d6de10eb281b98f5cfcd1841394c03da5df77c' (2026-07-07)
  → 'github:nix-community/nix-index-database/1111b9bc836afb7e31a7014e8d1272de9b1c917d' (2026-07-12)
• Updated input 'nix-index-database/nixpkgs':
    'github:NixOS/nixpkgs/65179426c83bb3f6bc14898b42ea1c6f01d374b0' (2026-07-02)
  → 'github:NixOS/nixpkgs/e7a3ca8092b61ff85b6a45bf863ea2b2d6a661b3' (2026-07-11)
• Updated input 'nix4vscode':
    'github:nix-community/nix4vscode/6c615cdf2b78d17ce097a5258a3caa5187d78a62' (2026-07-11)
  → 'github:nix-community/nix4vscode/3f63bd912f75a5ab2cea810f001c4cdc23f54d2d' (2026-07-18)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/0bb7ec54c8483066ec9d7720e780a5caa71f8612' (2026-07-08)
  → 'github:NixOS/nixpkgs/61b7c44c4073f0b827768aff0049561b5110ea5a' (2026-07-18)
• Updated input 'nur':
    'github:nix-community/NUR/0352662c18ef8c811cdf5093a27ab17e28af96aa' (2026-07-11)
  → 'github:nix-community/NUR/285852c144f86ac169ca6a8af4d8d469d99a6f5e' (2026-07-18)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/0bb7ec54c8483066ec9d7720e780a5caa71f8612' (2026-07-08)
  → 'github:nixos/nixpkgs/61b7c44c4073f0b827768aff0049561b5110ea5a' (2026-07-18)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/3fdc209a45ff9b4e95596feb3be1684d9da51735' (2026-07-10)
  → 'github:Gerg-L/spicetify-nix/c6ab7371e40abd405313af9bddafd5f37cc94f83' (2026-07-12)
• Updated input 'stylix':
    'github:danth/stylix/14814ef555d8148ab82eba5054e654cd9eae3a1f' (2026-07-06)
  → 'github:danth/stylix/c8ccc31f3ea29dc3eb5b54945e5eb549529491d6' (2026-07-14)

Sources Changelog:

No changes!

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@Reputable2772

Reputable2772 commented Jul 18, 2026

Copy link
Copy Markdown
Owner Author

Derivation /nix/store/cps65k3yrs0paz08jcbzlymj79wv5fz5-xdg-desktop-portal-gtk-1.15.3 fails to build on Github Actions, but builds fine locally.

Derivation has been pushed to cache from local machine as a temporary fix.

ETA: It is almost all of xdg-desktop-portal*, since all of them depend on flatpak (directly/indirectly thru xdg-desktop-portal)

@github-actions

Copy link
Copy Markdown

Profile diff:

accountsservice: 26.13.3 → 26.27.3
astal-apps: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-astal3: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-astal4: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-battery: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-bluetooth: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-cava: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-gjs: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-hyprland: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-io: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-mpris: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-network: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-notifd: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-powerprofiles: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-quarrel: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-tray: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
astal-wireplumber: 0-unstable-2026-06-21 → 0-unstable-2026-07-03
attica: 6.27.0 → 6.28.0
atuin: 18.16.1 → 18.17.0, +3689.1 KiB
bottom: 0.14.3 → 0.14.4
breeze: 6.7.2 → 6.7.3
breeze-icons: 6.27.0 → 6.28.0
build-all: ε → ∅
deno: 2.8.3 → 2.9.2, +115394.9 KiB
ebook-tools: 0.2.2 → ∅, -92.6 KiB
eza: 0.23.4 → 0.23.5, +450.4 KiB
fastfetch: 2.65.2 → 2.66.0
fastfetch-unwrapped: 2.65.2 → 2.66.0, +152.1 KiB
firefox: 152.0.5 → 152.0.6, -14.2 KiB
firefox-unwrapped: 152.0.5 → 152.0.6, +293.4 KiB
frameworkintegration: 6.27.0 → 6.28.0
freerdp: 3.27.1 → 3.29.0, +180.3 KiB
fwupd: 2.1.5 → 2.1.6, +73.2 KiB
inxi: 3.3.40-1 → 3.3.41-1
karchive: 6.27.0 → 6.28.0
kauth: 6.27.0 → 6.28.0
kbookmarks: 6.27.0 → 6.28.0
kcmutils: 6.27.0 → 6.28.0
kcodecs: 6.27.0 → 6.28.0
kcolorscheme: 6.27.0 → 6.28.0
kcompletion: 6.27.0 → 6.28.0
kconfig: 6.27.0 → 6.28.0, +37.9 KiB
kconfigwidgets: 6.27.0 → 6.28.0, +23.0 KiB
kcontacts: 6.27.0 → 6.28.0
kcoreaddons: 6.27.0 → 6.28.0, +45.5 KiB
kcrash: 6.27.0 → 6.28.0
kdbusaddons: 6.27.0 → 6.28.0
kdecoration: 6.7.2 → 6.7.3
kdoctools: 6.27.0 → 6.28.0
kfilemetadata: 6.27.0 → 6.28.0, -39.6 KiB
kglobalaccel: 6.27.0 → 6.28.0
kguiaddons: 6.27.0 → 6.28.0
ki18n: 6.27.0 → 6.28.0
kiconthemes: 6.27.0 → 6.28.0
kio: 6.27.0 → 6.28.0, +246.0 KiB
kirigami: 6.27.0 → 6.28.0
kirigami-addons: 1.12.1 → 1.13.0, +498.3 KiB
kitemmodels: 6.27.0 → 6.28.0
kitemviews: 6.27.0 → 6.28.0
kjobwidgets: 6.27.0 → 6.28.0
knewstuff: 6.27.0 → 6.28.0
knotifications: 6.27.0 → 6.28.0
kpackage: 6.27.0 → 6.28.0
kparts: 6.27.0 → 6.28.0
kpeople: 6.27.0 → 6.28.0
kpty: 6.27.0 → 6.28.0
kservice: 6.27.0 → 6.28.0
kstatusnotifieritem: 6.27.0 → 6.28.0
ktextwidgets: 6.27.0 → 6.28.0
kwallet: 6.27.0 → 6.28.0
kwidgetsaddons: 6.27.0 → 6.28.0
kwindowsystem: 6.27.0 → 6.28.0, +26.0 KiB
kxmlgui: 6.27.0 → 6.28.0, +86.4 KiB
liblouis: 3.33.0 → 3.38.0, +886.9 KiB
libphonenumber: 9.0.34 → 9.0.35
libqalculate: 5.11.0 → 5.12.0, +144.7 KiB
libtorrent-rasterbar: 2.0.12 → 2.0.13, +31.4 KiB
libxmp: 4.7.0 → 4.7.1
mesa: 26.1.4 → 26.1.5, +110.6 KiB
modemmanager-qt: 6.27.0 → 6.28.0
multipath-tools: 0.14.1 → 0.14.3
nh: 4.4.0 → 4.4.1
nh-unwrapped: 4.4.0 → 4.4.1
nix-index: 0.1.10 → 0.1.11, +823.8 KiB
nix-index-with-full-db: 0.1.10 → 0.1.11
nixos: 26.11.20260708.0bb7ec5 → 26.11.20260718.61b7c44, +504.0 KiB
nixos-system-hp-laptop: 26.11.20260708.0bb7ec5 → 26.11.20260718.61b7c44
nixos-system-lenovo-laptop: 26.11.20260708.0bb7ec5 → 26.11.20260718.61b7c44
nixos-system-rescue: 26.11.20260708.0bb7ec5 → 26.11.20260718.61b7c44
ntfs3g: 2026.2.25 → 2026.7.7, -59.4 KiB
ntfsprogs-plus: ∅ → 1.0.0, +913.8 KiB
oxygen-icons: 6.27.0 → 6.28.0, +278.5 KiB
pods: 3.0.0 → 3.1.0, +1932.2 KiB
prismlauncher: 11.0.2 → 11.0.3
prismlauncher-unwrapped: 11.0.2 → 11.0.3, +16.7 KiB
python3.14-cached-property: ∅ → 2.0.1, +34.4 KiB
python3.14-dulwich: ∅ → 1.2.6, +12014.0 KiB
python3.14-jq: 1.11.0 → 1.12.0
python3.14-nvchecker: 2.20 → 2.21, +34.6 KiB
python3.14-pygit2: ∅ → 1.19.3, +1988.5 KiB
python3.14-sentry-sdk: 2.64.0 → 2.66.0, +75.7 KiB
python3.14-structlog: 25.5.0 → 26.1.0, +18.2 KiB
qalculate-qt: 5.11.0 → 5.12.0
qqc2-desktop-style: 6.27.0 → 6.28.0
qtkeychain: 0.16.0 → 0.17.0
rclone: 1.74.3 → 1.74.4, +279.1 KiB
ripgrep: 15.1.0 → 15.2.0, +169.6 KiB
screen: 5.0.1 → 5.0.2
sh6cjac9463a9p76l8zri05msv5dg2nz: ε → ∅, -407.2 KiB
solid: 6.27.0 → 6.28.0
sonnet: 6.27.0 → 6.28.0
steam-run: 1.0.0.85, 1.0.0.85-fhsenv → 1.0.0.87, 1.0.0.87-fhsenv, -9.1 KiB
syndication: 6.27.0 → 6.28.0
vscode-extension-github-vscode-github-actions: 0.32.1 → 0.32.3
vscode-extension-jnoortheen-nix-ide: 0.5.9 → 0.5.10
vscode-extension-rust-lang-rust-analyzer: 0.3.2963 → 0.3.2971, +2454.7 KiB
webkitgtk: 2.52.4+abi=4.1, 2.52.4+abi=6.0 → 2.52.5+abi=4.1, 2.52.5+abi=6.0, +936.8 KiB
xsetroot: 1.1.3 → 1.1.4
yjv1x68qwmln1g37214z4favvsxfc7d1: ∅ → ε, +408.4 KiB
zsh: 5.9.1 → 5.9.2, +88.3 KiB

Vulnerabilities in closure:
124 derivations with active advisories


Diff-1.0.2

/nix/store/c5z2ani8q4fyjiv2ia0yc79vsrhcm603-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1


ShellCheck-0.11.0

/nix/store/abav7hjjxhmhibvr3dmm8rb54z5jsc0r-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8


ada-3.4.4

/nix/store/38g0iy0mz633i3fq4wamyg4127yv9bqh-ada-3.4.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3


async-2.2.6

/nix/store/8ad3lzil90zkwywzdmjzhc76jij96n3x-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8


avahi-0.8

/nix/store/rrsp7a7g90yann7lwllh528a790irccq-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5


binutils-2.46

/nix/store/2rpwmr0pmk84rdhgf03zpmazc7kh4w7h-binutils-2.46.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-6846 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-69649 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69650 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69652 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69651 5.5


bolt-0.9.8

/nix/store/y09anrwj5hyh342ik2mvsd528m2rxd98-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5


busybox-1.37.0

/nix/store/z0c4ahwc9kr5k4124jl61l4nr07zqgg4-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2


bytes-1.11.0

/nix/store/k5ds0lzglmsv4gzy6a1zc7lq0q8w7gbr-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5


capstone-5.0.9

/nix/store/src1i5658wwdfbdwmg3zpsrsh4zw439r-capstone-5.0.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8


cargo-1.96.0-x86_64-unknown-linux-gnu

/nix/store/dmqyaxga0ixa5f6bixzajzzzrz8i6q4v-cargo-1.96.0-x86_64-unknown-linux-gnu.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-14363 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-58521 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4
https://nvd.nist.gov/vuln/detail/CVE-2026-58519 5.4


cargo-1.96.1

/nix/store/skh3jqvi15bgmrkqdz9mn1p2g8a4vhj3-cargo-1.96.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-14363 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-58521 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4
https://nvd.nist.gov/vuln/detail/CVE-2026-58519 5.4


commonmark-0.2.6.1

/nix/store/8zh1smjabnd7fhbgxl4lqlwcssj5zf0n-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1


cups-2.4.19

/nix/store/388kf1kn4rj7zr1n8bjbwp8ns8slz6s9-cups-2.4.19.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7


curl-0.4.49

/nix/store/w5k3m8m80yyxicg71g5fh46csq0hma37-curl-0.4.49.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-32221 9.8
https://nvd.nist.gov/vuln/detail/CVE-2022-27781 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27782 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-28319 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27776 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-32206 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-43552 5.9
https://nvd.nist.gov/vuln/detail/CVE-2023-28320 5.9
https://nvd.nist.gov/vuln/detail/CVE-2023-28321 5.9
https://nvd.nist.gov/vuln/detail/CVE-2022-35252 3.7
https://nvd.nist.gov/vuln/detail/CVE-2023-28322 3.7


dash-0.5.13.4

/nix/store/gx0v4qzc10v3lchym55wssz3jp9q7s71-dash-0.5.13.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5


dbus-0.9.10

/nix/store/3r6dpcqc9s5hgpvr3nsiqnp846s7z1xl-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5


dbus-1

/nix/store/vb4ka2399s8n2630f765gwvhzg4zji6q-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5


dhcpcd-10.3.2

/nix/store/69ph6dpfxcyr3y301s65bhsp35m94ham-dhcpcd-10.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-56116 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-56113 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-56114 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-56117 4.7


diff-0.1.13

/nix/store/w2gyqidwx0jyq5xgp1x9g4brmfjmac2r-diff-0.1.13.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1


exiv2-0.28.8

/nix/store/xnwz5vhq9s8d2ra4v0ws44hrp3rg048r-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3


ffmpeg-7.1.5

/nix/store/5v227mf9rjxg31x2iqxa4n028x7rhq99-ffmpeg-7.1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30997 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-30998 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-30999 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25469 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-10256 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-40962 4.9
https://nvd.nist.gov/vuln/detail/CVE-2025-12343 3.3


ffmpeg-8.1.2

/nix/store/k4sf86kddck1lljc1pqz2s3pb69dvr8p-ffmpeg-8.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-25468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25469 6.5


filelock-0.1.1.9

/nix/store/0dmn6g850n5lbhzx4dl5iqzkr5yh69y0-filelock-0.1.1.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3


firefox-152.0.6

/nix/store/1bfqf9b5msx6jxacafzjcwwnq6i7ax4v-firefox-152.0.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-13356 6.3


fontforge-20251009

/nix/store/j6xysr2gwc56af4cnqq322xvimb5w9rg-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8


fontforge-20251009

/nix/store/jhzlwgjzkbkmcr3jrxhlnn42751cp6d6-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8


gawk-5.3.2

/nix/store/b73fjyfb38q0l9qdbp79s758akkllnlz-gawk-5.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-40468 9.1
https://nvd.nist.gov/vuln/detail/CVE-2026-40469 9.1
https://nvd.nist.gov/vuln/detail/CVE-2026-40467 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-40553 7.5


gawk-5.4.0

/nix/store/klqv2jjh181lrrmfxxxc97fwxf9smxxh-gawk-5.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-40468 9.1
https://nvd.nist.gov/vuln/detail/CVE-2026-40469 9.1
https://nvd.nist.gov/vuln/detail/CVE-2026-40467 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-40553 7.5


gcc-4.6.4

/nix/store/j212id03bbh7aapvz9lww7givd5n49n6-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8


gcc-10.4.0

/nix/store/q10yhdcqv75q31v1a312xvvxfk5lj1kz-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8


gcc-15.2.0

/nix/store/i1q8p8pa9wkqwh50d8fxgf7vg2assjvb-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8


git-2.54.0

/nix/store/z4bgb40x2r71vpkilbff5lbybjw4wkka-git-2.54.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3


glibc-2.42

/nix/store/2yfl6znx5acxs2rl3fb0a8mf1i3dcxgm-glibc-2.42.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4


glibc-2.42-67

/nix/store/kbzwgrmjgfh5if2mffdb1nnvh36j5kra-glibc-2.42-67.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4


glibc-2.42-67-source-unsecvars

/nix/store/bmy42mr76r8c8ki1vixp9pf4l0dgqa8n-glibc-2.42-67-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4


go-1.24.13-linux-amd64-bootstrap

/nix/store/y2pv50wj4byi9pmjj1wc077mrj4xgqqa-go-1.24.13-linux-amd64-bootstrap.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27143 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-27140 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-39822 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32280 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32283 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33811 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33814 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-39820 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-39836 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-42499 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-42501 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-27144 7.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32282 6.4
https://nvd.nist.gov/vuln/detail/CVE-2026-27142 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32289 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39823 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39826 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39817 5.9
https://nvd.nist.gov/vuln/detail/CVE-2026-32288 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-39819 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-39825 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-42505 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9
https://nvd.nist.gov/vuln/detail/CVE-2026-27139 2.5


go-1.24.13-linux-386-bootstrap

/nix/store/7bjw7xcwy0ph8zhhcyg3zp3r7yfgdgiw-go-1.24.13-linux-386-bootstrap.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27143 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-27140 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-39822 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32280 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32283 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33811 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33814 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-39820 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-39836 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-42499 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-42501 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-27144 7.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32282 6.4
https://nvd.nist.gov/vuln/detail/CVE-2026-27142 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32289 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39823 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39826 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39817 5.9
https://nvd.nist.gov/vuln/detail/CVE-2026-32288 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-39819 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-39825 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-42505 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9
https://nvd.nist.gov/vuln/detail/CVE-2026-27139 2.5


go-1.26.4

/nix/store/zg5cs1qx07lfgflyz3j6wj60grr1y6mk-go-1.26.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39822 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-42505 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9


gzip-1.2.4

/nix/store/6b65s685hmdnn3cayn912c2m2f6zmvsl-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41992 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-41991 4.7


gzip-1.14

/nix/store/0m3pli39g64nybmr865xx7wfxg1fa5mv-gzip-1.14.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41992 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-41991 4.7


hedgehog-1.5

/nix/store/7gib22pxxns4l8acnlkf58fn5gkmjyzn-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1


hedgehog-1.5-r2.cabal

/nix/store/dhh310r6k1yq0fra4q1yjwfp2a37jqhl-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1


inetutils-2.7

/nix/store/s58fygpmqv8bvmfdbbnm869zw7icap4r-inetutils-2.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32772 3.4


jam-2.6.1

/nix/store/x60liw9ix6pb70nbj80pc4q1qal5975n-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3


jam-2.6.1.tar

/nix/store/kmhvx9jfdlljwx4qmppvjbxp4r4zbk71-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3


jbig2dec-0.20

/nix/store/rs22xq6wmfds6kwr8iwbg2jjn0dris4l-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5


jose-0.11

/nix/store/8vj8vnww69yndj76h19m19v8wzqh4i8n-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9


jq-1.8.2

/nix/store/dfwn0131h6xq4nifhvrw7ivpf9ch9j7m-jq-1.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-44777 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3


jq-1.8.2

/nix/store/75vdfwijqpnjv21s8gs0bpvyqndj77pk-jq-1.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-44777 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3


jq-1.8.2-binlore

/nix/store/01885vsf34m866iadhmz3h7fmscn6mgk-jq-1.8.2-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3


kcoreaddons-5.116.0

/nix/store/aj1zk8swhis54mpj23dcjp4m1qaad0ms-kcoreaddons-5.116.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41526 6.5


lapack-3

/nix/store/p9f38m1n478jhyqpqfv98lf15y59zf4j-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1


libmicrohttpd-1.0.5

/nix/store/xn7ghycldhj6c3g0qlpbpjm36pwk2nkg-libmicrohttpd-1.0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5


libmpeg2-0.5.1

/nix/store/s4cyfhg6mapfjgh61ni9riwffxwpp1nl-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5


libpng-1.2.59

/nix/store/0kly8vasiy2lq7c13zpsi18qvpa8l95z-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-34757 5.1


libraw-0.22.1

/nix/store/l02g98mwzhn5s952hfq9b1iz3fbfd0v1-libraw-0.22.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-20911 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-21413 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-20884 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-24450 8.1


libsndfile-1.2.2

/nix/store/249zpkq3jiqhh6rdcbvca4bwq34wh18b-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-37555 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3


libssh2-1.11.1

/nix/store/i6f5yxpm54j6k7jf5i1iphi254ab65p1-libssh2-1.11.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-58050 7.0
https://nvd.nist.gov/vuln/detail/CVE-2026-58051 6.5


libxml2-2.15.3

/nix/store/b0wwcf33iabfa4iklhk414k3nqqqzl83-libxml2-2.15.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-11979 7.8


lua-5.2.4

/nix/store/c7qz3pc2w931rrd5j6fpxdnipcxk3fgr-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5


lua-5.2.4-env

/nix/store/7kk9xh5ahnm33hn2a74qf8imcpalrqb5-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5


malcontent-0.13.1

/nix/store/zk0yspfd7gd45qpn3wzg1lhq2680wivy-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3


memcached-1.6.42

/nix/store/1rm820893vkn6pidryzc4v2ggrf3d0d4-memcached-1.6.42.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8


mercurial-7.2.2

/nix/store/rmgxzdghkp9n37y2jz4cm8fa9gvk69xh-mercurial-7.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3


mercurial-7.2.2-vendor

/nix/store/961km4fq9688p4zlls58rvm76b7sci82-mercurial-7.2.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3


mercurial-7.2.2-vendor-staging

/nix/store/rhxayslzny7s25lz1wkmkrkaryw2r7vy-mercurial-7.2.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3


miniaudio-0.11.25

/nix/store/642k4m3hqp4ajnks6ghjhfqadyd6lg4q-miniaudio-0.11.25.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32837 4.0


nemo-6.6.4

/nix/store/1m45baqsi26gq27p747na0x8m7vgqchd-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1


network-3.2.8.0

/nix/store/hycn509lipn0xj99k580r1p5zxvdvvvm-network-3.2.8.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-35047 9.9
https://nvd.nist.gov/vuln/detail/CVE-2021-35049 9.9
https://nvd.nist.gov/vuln/detail/CVE-2021-35048 9.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24388 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24389 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24390 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24391 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24392 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24393 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24394 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35050 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-0486 4.4
https://nvd.nist.gov/vuln/detail/CVE-2022-0997 3.9


nghttp2-1.69.0

/nix/store/bfwr3bhxn2r9mpib1azkm9vpv4hyij1s-nghttp2-1.69.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-58055 5.4


ninja-1.13.2

/nix/store/gw4ndlgia7sa19gx35shl25iknkvycc3-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5


nix-0.29.0

/nix/store/xdg54h1h8nh7lryaa7rz2dcj28xm4awh-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3


nix-0.31.1

/nix/store/p9a76mcfxf4k8g6xwwl4ffxfkapngmm1-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3


onnx-1.21.0

/nix/store/7a5i99civ3yxsp1vf8nvz7w7h5ggia94-onnx-1.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-44512 5.5


openexr-3.4.11

/nix/store/i06m24nnwj83ws8cx3dg927rlpsx3aqw-openexr-3.4.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-45696 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-44663 6.1


openssh-10.3p1

/nix/store/85zgfyw83lgjsig6sqxcpiwazgv30dwp-openssh-10.3p1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-60002 7.7
https://nvd.nist.gov/vuln/detail/CVE-2026-60001 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-59999 5.9
https://nvd.nist.gov/vuln/detail/CVE-2026-59998 4.8
https://nvd.nist.gov/vuln/detail/CVE-2026-59995 4.2
https://nvd.nist.gov/vuln/detail/CVE-2026-59996 4.2
https://nvd.nist.gov/vuln/detail/CVE-2026-59997 4.2
https://nvd.nist.gov/vuln/detail/CVE-2026-60000 3.7


openvswitch-3.7.1

/nix/store/s4h3m82cvjwv99j1j42i19c652gn18pc-openvswitch-3.7.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1


orc-0.4.42

/nix/store/57ib506fvd1aaxqn3mz2g5vbshvmcnf2-orc-0.4.42.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8


patch-2.8

/nix/store/9c5zr91lrzr1809i6s7j1mwrk13jj1ia-patch-2.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-56288 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-56289 5.5


perl-5.42.0

/nix/store/2pjc5mf6kaaag7a23qzhk93z4782iqp5-perl-5.42.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-13221 9.1
https://nvd.nist.gov/vuln/detail/CVE-2026-57432 8.4


perl-5.42.0-binlore

/nix/store/cb4kfv4280zfzi3xnkl9mjvlbikgwdlh-perl-5.42.0-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-8376 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-13221 9.1
https://nvd.nist.gov/vuln/detail/CVE-2026-57432 8.4


perl-5.42.0-env

/nix/store/nim2jz5y9sxhcvl1hsk71q32p57s021y-perl-5.42.0-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-8376 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-13221 9.1
https://nvd.nist.gov/vuln/detail/CVE-2026-57432 8.4


php-calendar-8.4.23

/nix/store/62f9ljfada7jix75gmzy7hr5m612b6ad-php-calendar-8.4.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5


pip-20.3.4-source

/nix/store/7lad7ppjb29fcygr09kcmfnfnl49bdlv-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-8643 5.5


pods-3.1.0

/nix/store/pi2dclrd179jh0av6f0hk5k7zd6f3gqc-pods-3.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8


pods-3.1.0-vendor

/nix/store/bjnyvxkb14ig077iwx30r1zpz9qhwkxr-pods-3.1.0-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8


pods-3.1.0-vendor-staging

/nix/store/7fmfysfghri4hh7s3vr0nmmldjg4r35a-pods-3.1.0-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8


polkit-1.pam

/nix/store/ql6088b9ncfdswccyqq00mxrnx2cf56n-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8


python-2.7.18.12

/nix/store/3vmvsz8yicrw19vnjanhzy0hly2wap3b-python-2.7.18.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-48565 9.8
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2024-9287 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8
https://nvd.nist.gov/vuln/detail/CVE-2022-0391 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-45061 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-48560 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-24329 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-36632 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-6232 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-7592 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-13836 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-3087 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-3644 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4224 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-7210 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-15308 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-26488 7.0
https://nvd.nist.gov/vuln/detail/CVE-2021-3733 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-48564 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-6019 6.1
https://nvd.nist.gov/vuln/detail/CVE-2021-23336 5.9
https://nvd.nist.gov/vuln/detail/CVE-2022-48566 5.9
https://nvd.nist.gov/vuln/detail/CVE-2025-6075 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-13837 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-40217 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-12084 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-12781 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-4360 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-13462 3.3
https://nvd.nist.gov/vuln/detail/CVE-2026-4519 3.3


python-3.14.4

/nix/store/iz35ijmz0z8vg80zn7293bdfk70viz7j-python-3.14.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-3087 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-7210 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-15308 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-6019 6.1


rubygems-3.7.2

/nix/store/y9z6lf0xfg7a3d698z5mz2qfgrxzra7q-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3


safe-0.3.21

/nix/store/h730wxa98412b93c3is14awgxyrkqfvn-safe-0.3.21.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-38164 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-47524 5.4
https://nvd.nist.gov/vuln/detail/CVE-2021-40835 4.6
https://nvd.nist.gov/vuln/detail/CVE-2021-40834 4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-44751 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28868 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28869 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28870 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28872 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28873 4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-33594 3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33595 3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33596 3.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38163 3.5


safe-0.3.21-r1.cabal

/nix/store/lb2cdwz0cv7llqs98mgrj53wzq8bjsb3-safe-0.3.21-r1.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-38164 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-47524 5.4
https://nvd.nist.gov/vuln/detail/CVE-2021-40835 4.6
https://nvd.nist.gov/vuln/detail/CVE-2021-40834 4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-44751 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28868 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28869 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28870 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28872 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28873 4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-33594 3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33595 3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33596 3.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38163 3.5


samba-4.23.8

/nix/store/a6wb6vcn6pnc3z7jy271rz33kbn1z0f3-samba-4.23.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-2340 6.5


sassc-3.6.2

/nix/store/c2ja2nil2h2qzap4iia24zgpqp8rh57a-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5


setuptools-44.0.0-source

/nix/store/l0zfh8xhf3975y4ba2sqi1wcjy5affnl-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-59890 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9


shellcheck-0.11.0

/nix/store/k60yl5yh3wm8bid994cvg6j061lz83xq-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8


snappy-1.2.2

/nix/store/jnr0v564ybc6cgvsswwkkib3khhxpp7p-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8


sqlite-3.53.1

/nix/store/57sk6fs1j2fk6z3265lswqzimb853dky-sqlite-3.53.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-11822 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-11824 7.8


stringbuilder-0.5.1

/nix/store/9m5gqp6rr1nwkbv6gdy63zib41xy46ns-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2


subversion-1.14.5

/nix/store/fzf5v4rjpg6m4wpndxn9wgnp91sa1vbh-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3


systemd-2.4.0

/nix/store/60l2l3r3sxb3bl0392p66mh6nf893gy8-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-40225 6.4
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7


taglib-1.13.1

/nix/store/sax28ny8wsx2sk7mz59z020wvjsz79fc-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9


tap-1.0.1

/nix/store/nn9fk360smbr0qnvn1zibdrca0wj71na-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4


tar-0.6.4.0

/nix/store/6rdk6cny1a8fmlylba8jav8i14vg2snk-tar-0.6.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-23950 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-32803 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-32804 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37701 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37712 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37713 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-24842 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-59873 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-59874 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-26960 7.1
https://nvd.nist.gov/vuln/detail/CVE-2024-28863 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-29786 6.3
https://nvd.nist.gov/vuln/detail/CVE-2023-39804 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-23745 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-48303 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31802 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-53655 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-59871 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-45582 4.1
https://nvd.nist.gov/vuln/detail/CVE-2021-20193 3.3


tar-0.6.4.0-r4.cabal

/nix/store/3k0l2vqsrj14bk27vn2ffsfgfbc6z8bf-tar-0.6.4.0-r4.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-23950 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-32803 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-32804 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37701 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37712 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37713 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-24842 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-59873 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-59874 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-26960 7.1
https://nvd.nist.gov/vuln/detail/CVE-2024-28863 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-29786 6.3
https://nvd.nist.gov/vuln/detail/CVE-2023-39804 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-23745 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-48303 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31802 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-53655 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-59871 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-45582 4.1
https://nvd.nist.gov/vuln/detail/CVE-2021-20193 3.3


uuid-1.3.16.1

/nix/store/9f6rzbqc8fabr99z27xdfz3s86lzx1xd-uuid-1.3.16.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-41988 3.2


uuid-1.20.0

/nix/store/pacgmmki0l2yphy4v0nykpms527cp8d1-uuid-1.20.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-41988 3.2


vault-0.3.1.6

/nix/store/vzysrsfkcffr3b2akz3639l3j35l390x-vault-0.3.1.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-2048 8.1
https://nvd.nist.gov/vuln/detail/CVE-2021-27400 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-6337 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5807 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-6037 6.8
https://nvd.nist.gov/vuln/detail/CVE-2023-0620 6.5
https://nvd.nist.gov/vuln/detail/CVE-2023-0665 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-6014 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-8365 6.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3024 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-38554 5.3
https://nvd.nist.gov/vuln/detail/CVE-2022-41316 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-25000 5.0
https://nvd.nist.gov/vuln/detail/CVE-2025-4166 4.5
https://nvd.nist.gov/vuln/detail/CVE-2023-24999 4.4
https://nvd.nist.gov/vuln/detail/CVE-2023-2121 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-6011 3.7
https://nvd.nist.gov/vuln/detail/CVE-2021-41802 2.9


vim-9.2.0541

/nix/store/bkzj5i4sjc9rw5ackri4jpqwyp34bmqg-vim-9.2.0541.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-52859 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-52858 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-52860 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-55693 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-55895 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-57455 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-57456 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-59856 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-59858 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-57453 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-57454 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-55892 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-57452 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-59857 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-57451 5.3


warp-3.4.9

/nix/store/ykahaxyfn0vhlv8x2njacfapz4zrh5nj-warp-3.4.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4428 8.9
https://nvd.nist.gov/vuln/detail/CVE-2022-2225 8.1
https://nvd.nist.gov/vuln/detail/CVE-2023-2754 7.4
https://nvd.nist.gov/vuln/detail/CVE-2023-1862 7.3
https://nvd.nist.gov/vuln/detail/CVE-2025-0651 7.1
https://nvd.nist.gov/vuln/detail/CVE-2023-0652 7.0
https://nvd.nist.gov/vuln/detail/CVE-2023-1412 7.0
https://nvd.nist.gov/vuln/detail/CVE-2022-3320 6.7
https://nvd.nist.gov/vuln/detail/CVE-2022-3512 6.7
https://nvd.nist.gov/vuln/detail/CVE-2022-2145 5.8
https://nvd.nist.gov/vuln/detail/CVE-2022-4457 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-0238 3.9
https://nvd.nist.gov/vuln/detail/CVE-2023-0654 3.9


websockets-0.13.0.0

/nix/store/ash1v2d28bssz9x4frsffdxmjm0py4hx-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9


websockets-0.13.0.0-r6.cabal

/nix/store/lqd2yw70kh3hbvq72yfziif58lksph9w-websockets-0.13.0.0-r6.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9


wheel-0.37.1-source

/nix/store/y0zvpk9nm7ipnk87g2p6xv8ss4vsvqdc-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5


word-wrap-0.5

/nix/store/b18wy0g9w9ib5lkbs0qas84pi4izzdz9-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3


yaml-0.11.11.2

/nix/store/vrvm6mww6wdvpl7kkmyhm6d0l7f1c4bh-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5


yaml-0.11.11.2-r2.cabal

/nix/store/41rsdgjin32rbmyx7bsa42m7q64f7g5s-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5


yarn-1.22.22

/nix/store/qpxbn8s3fgdqfd94vw1p010fvfcybpff-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3


yasm-1.3.0

/nix/store/0lmxlhdc85r46bw5lpkdhxqqhk3z9ckq-yasm-1.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33454 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33455 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33456 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33457 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33458 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33459 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33460 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33461 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33462 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33463 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33464 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33465 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33466 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33467 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33468 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-30402 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-31972 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-31973 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-31974 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-51258 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-31975 3.3


yoke-0.8.1

/nix/store/6h5dppd2712a0pj74gh561jwkxpv4q37-yoke-0.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26056 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-26055 7.5


zlib-0.7.1.1

/nix/store/mshwq90yjjli4zklfb43kfcaayq3n03f-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-27820 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0


zlib-1.3.2

/nix/store/8djzapjdks840q93hygdzyayfq5ldcgl-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27820 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0


zlib-1.3.2

/nix/store/bgsz0wgfcjfgzi6kyqc3h058jz4kn085-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27820 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

@Reputable2772
Reputable2772 merged commit a8075d5 into master Jul 18, 2026
1 of 3 checks passed
@Reputable2772
Reputable2772 deleted the flake-update/2026-29 branch July 18, 2026 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant