chore: update flake.lock & sources (2026-04-18) by Reputable2772 · Pull Request #90 · Reputable2772/NixOS

Reputable2772 · 2026-04-18T17:04:12Z

Automated Pull Request for Week 16

Flakes Changelog:

• Updated input 'home-manager':
    'github:nix-community/home-manager/b0569dc6ec1e6e7fefd8f6897184e4c191cd768e' (2026-04-11)
  → 'github:nix-community/home-manager/565e5349208fe7d0831ef959103c9bafbeac0681' (2026-04-17)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/cef5cf82671e749ac87d69aadecbb75967e6f6c3' (2026-04-05)
  → 'github:nix-community/nix-index-database/bedba5989b04614fc598af9633033b95a937933f' (2026-04-12)
• Updated input 'nix-index-database/nixpkgs':
    'github:NixOS/nixpkgs/6201e203d09599479a3b3450ed24fa81537ebc4e' (2026-03-24)
  → 'github:NixOS/nixpkgs/4c1018dae018162ec878d42fec712642d214fdfa' (2026-04-09)
• Updated input 'nix4vscode':
    'github:nix-community/nix4vscode/98c5bbb8b5cd5f3fe1ce1de3dabf744dfa100c49' (2026-04-11)
  → 'github:nix-community/nix4vscode/b69acee4ba8dffcfa553c9a7ba19984db1a1c3a7' (2026-04-18)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/4c1018dae018162ec878d42fec712642d214fdfa' (2026-04-09)
  → 'github:NixOS/nixpkgs/4bd9165a9165d7b5e33ae57f3eecbcb28fb231c9' (2026-04-14)
• Updated input 'nur':
    'github:nix-community/NUR/6046e21406c4a6cac05b22c077e0f4ed5f2d7b8e' (2026-04-11)
  → 'github:nix-community/NUR/7663873ea0473ed21ea6a03d6939ecb188636fda' (2026-04-18)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/4c1018dae018162ec878d42fec712642d214fdfa' (2026-04-09)
  → 'github:nixos/nixpkgs/4bd9165a9165d7b5e33ae57f3eecbcb28fb231c9' (2026-04-14)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/ec8d73085fdf807d55765335dc8126e14e7b2096' (2026-04-05)
  → 'github:Gerg-L/spicetify-nix/8b00357d910c5281181c21fc3a0d071ceec80c06' (2026-04-14)
• Updated input 'stylix':
    'github:danth/stylix/d27951a6539951d87f75cf0a7cda8a3a24016019' (2026-04-05)
  → 'github:danth/stylix/e3861617645a43c9bbefde1aa6ac54dd0a44bfa9' (2026-04-14)

Sources Changelog:

nix-fast-build: 1030b0cfaca52f95769d0998ea366946144cd47c → 67df5acda0e22b97e17d5eed579b969ddb9ea06c

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

github-actions · 2026-04-18T17:31:15Z

Profile diff:

warning: unknown experimental feature 'pipe-operators'
attica: 6.24.0 → 6.25.0
b16fhd6a5q8b6nl5safmh4bvgswzayyk: ∅ → ε, +383.1 KiB
breeze-icons: 6.24.0 → 6.25.0, +48.5 KiB
dmenu: ∅ → 5.4, +66.2 KiB
easyeffects: 8.1.6 → 8.1.8, +23.1 KiB
electron: 39.8.2 → 39.8.7
electron-unwrapped: 39.8.2 → 39.8.7
flatpak: 1.16.4 → 1.16.6
frameworkintegration: 6.24.0 → 6.25.0
getconf-glibc: ∅ → 2.42-51
hyperv-daemons: 6.19.11 → 7.0
hyperv-daemons-bin: 6.19.11 → 7.0
initrd-linux: 6.19.11 → 7.0, +2198.4 KiB
karchive: 6.24.0 → 6.25.0
kauth: 6.24.0 → 6.25.0
kbookmarks: 6.24.0 → 6.25.0
kcmutils: 6.24.0 → 6.25.0
kcodecs: 6.24.0 → 6.25.0, -9.4 KiB
kcolorscheme: 6.24.0 → 6.25.0
kcompletion: 6.24.0 → 6.25.0
kconfig: 6.24.0 → 6.25.0, +27.2 KiB
kconfigwidgets: 6.24.0 → 6.25.0
kcontacts: 6.24.0 → 6.25.0
kcoreaddons: 6.24.0 → 6.25.0, +23.0 KiB
kcrash: 6.24.0 → 6.25.0
kdbusaddons: 6.24.0 → 6.25.0
kdoctools: 6.24.0 → 6.25.0
kfilemetadata: 6.24.0 → 6.25.0
kglobalaccel: 6.24.0 → 6.25.0
kguiaddons: 6.24.0 → 6.25.0
ki18n: 6.24.0 → 6.25.0
kiconthemes: 6.24.0 → 6.25.0
kio: 6.24.0 → 6.25.0, +176.4 KiB
kirigami: 6.24.0 → 6.25.0
kitemmodels: 6.24.0 → 6.25.0
kitemviews: 6.24.0 → 6.25.0
kjobwidgets: 6.24.0 → 6.25.0
knewstuff: 6.24.0 → 6.25.0
knotifications: 6.24.0 → 6.25.0
kpackage: 6.24.0 → 6.25.0
kparts: 6.24.0 → 6.25.0
kpeople: 6.24.0 → 6.25.0
kpty: 6.24.0 → 6.25.0
kservice: 6.24.0 → 6.25.0
kstatusnotifieritem: 6.24.0 → 6.25.0
ktextwidgets: 6.24.0 → 6.25.0
kwallet: 6.24.0 → 6.25.0, +14.8 KiB
kwidgetsaddons: 6.24.0 → 6.25.0, +54.1 KiB
kwindowsystem: 6.24.0 → 6.25.0
kxmlgui: 6.24.0 → 6.25.0, +25.7 KiB
libphonenumber: 9.0.27 → 9.0.28
linux: 6.19.11 → 7.0, +1292.1 KiB
linux-firmware: 20260309 → 20260410, +14098.1 KiB
modemmanager-qt: 6.24.0 → 6.25.0
nix: 2.31.4, 2.34.5 → 2.34.6, -3576.6 KiB
nix-cmd: 2.31.4, 2.34.5 → 2.34.6, -972.9 KiB
nix-expr: 2.31.4, 2.34.5 → 2.34.6, -2852.2 KiB
nix-fetchers: 2.31.4, 2.34.5 → 2.34.6, -1368.5 KiB
nix-flake: 2.31.4, 2.34.5 → 2.34.6, -931.5 KiB
nix-main: 2.31.4, 2.34.5 → 2.34.6, -370.5 KiB
nix-nswrapper: ∅ → 2.34.6, +131.8 KiB
nix-store: 2.34.5 → 2.34.6
nix-util: 2.34.5 → 2.34.6
nixos: 26.05.20260409.4c1018d → 26.05.20260414.4bd9165, +772.1 KiB
nixos-system-lenovo-laptop: 26.05.20260409.4c1018d → 26.05.20260414.4bd9165
nixos-system-rescue: 26.05.20260409.4c1018d → 26.05.20260414.4bd9165
noto-fonts: 2026.03.01 → 2026.04.01
parted: 3.6 → 3.7, +130.8 KiB
pipewire-ladspa: ∅ → ε
prismlauncher: 10.0.5 → 11.0.1
prismlauncher-unwrapped: 10.0.5 → 11.0.1, +224.5 KiB
proton-vpn: 4.15.1 → 4.15.2, +111.6 KiB
python3.13-pydbus: ∅ → 0.6.0, +208.6 KiB
q1y0143ricg23sic67ff0rwicj9xkscc: ε → ∅, -379.2 KiB
qqc2-desktop-style: 6.24.0 → 6.25.0
skopeo: 1.22.0 → 1.22.1, +85.2 KiB
solid: 6.24.0 → 6.25.0
sonnet: 6.24.0 → 6.25.0
syndication: 6.24.0 → 6.25.0
turbostat: 6.19.11 → 7.0, +10.5 KiB
unit-modprobe: ∅ → .service
unit-network.target: ε → ∅
unit-networking-scripted.target: ε → ∅
unit-systemd-udev-settle.service: ε → ∅
uwsm: ∅ → 0.26.4, +376.6 KiB
vscode-extension-eamodio-gitlens: 17.11.1 → 17.12.1, -6678.6 KiB
x86_energy_perf_policy: 6.18.21 → 6.18.22

Vulnerabilities in closure:
119 derivations with active advisories

Diff-1.0.2

/nix/store/7kwbv6s59ipydz29s086wn73wnnvjrwf-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1

ShellCheck-0.11.0

/nix/store/b2cnc4mi1dvmcbsx1fnjfpwrc4srsisp-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

accountsservice-23.13.9

/nix/store/sr3gvhc6rqjh4f0yy24z50fy49c7xbbs-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 8.1

ada-3.4.3

/nix/store/47kdy19xlbkw1bs8awhzh0lm74hzw3qv-ada-3.4.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3

assimp-6.0.2

/nix/store/dwr0zmiag4k9hiz2jari2w66jv3dlw77-assimp-6.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-11275 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-11277 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-15538 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-11274 3.3

async-2.2.6

/nix/store/r2wrgxmbqnf9rk065iqfp22mwzmbzric-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8

avahi-0.8

/nix/store/cgjzks17iwh8fxmg1vay388rl6h8iyd2-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68471 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-24401 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68276 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-34933 5.5

binutils-2.44

binutils-2.44

bolt-0.9.8

/nix/store/mmqsgmwl45yxd3ibfg541bbi34dqcz05-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5

busybox-1.37.0

/nix/store/pfrk8bwsw8dybdclnw3cgfmqq5m7qagy-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-60876 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2

bytes-1.11.0

/nix/store/0qra2cm8kqzi4xa7qw1k7i8gmjym1b9p-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5

capstone-5.0.7

/nix/store/8wjim7v8my7h3ha1km7vhjjhcl4z36m4-capstone-5.0.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8

commonmark-0.2.6.1

/nix/store/9bjpsgkbnq38dlgyk9r301ffx6rrbfin-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1

cryptography-46.0.5-vendor

/nix/store/s0v6hs9kb1dkfvgffyyhabgrv6fpwi2d-cryptography-46.0.5-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34073 5.3

cryptography-46.0.5-vendor-staging

/nix/store/a0cr1rvk1j6pc911d0kqvpsibdksgraa-cryptography-46.0.5-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34073 5.3

cups-2.4.16

/nix/store/njsvyl5k6i876904rqs2r7f5kr97wnji-cups-2.4.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

curl-0.4.49

curl-8.18.0

/nix/store/czlgcsw5v6hcxsh33qbk2jf638j8a1vh-curl-8.18.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-3805 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-1965 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-3783 5.3

dash-0.5.13.1

/nix/store/hh0bvrnmrlan5f6vfp9j1r9ifp2y9kwj-dash-0.5.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5

dbus-0.9.10

/nix/store/3y6700cvw4935mhkqi5wxrg2m8i1k0kc-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/7x127jk6zfczm2ah72a0mm06cmqzzaqi-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

exiv2-0.28.8

/nix/store/qa3adw2vg6pfysmf76npib5ld3kiqzvn-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3

ffmpeg-7.1.3

ffmpeg-8.0.1

filelock-0.1.1.8

/nix/store/bsg17fww043hvz79y5pn0ns7lchb73a4-filelock-0.1.1.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3

fontforge-20251009

/nix/store/ggq4wcydrk0aillx8xb9nmx59j4av0nw-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

fontforge-20251009

/nix/store/4cy865m461cw3bmhnsa6hwjcr0015qy1-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

gcc-4.6.4

/nix/store/z1zdkd4s0d8np7ss9v1ardcsg89dfr46-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-10.4.0

/nix/store/lz0ih8gk18cvfz26waybzl77h4xnj0w9-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-14.3.0

/nix/store/7i0f5gfas6iija8i31l7b2bdjpiv779i-gcc-14.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/g2bgqjw27vlax90fwfzbv57dg335pqxc-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/vb8rw36wnyvgmnq6mv7vj5iv75a4dfa5-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

giflib-5.2.2

/nix/store/4a8n57md2iycsyiddbnfxw4l7kxi39cx-giflib-5.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26740 8.2
https://nvd.nist.gov/vuln/detail/CVE-2024-45993 6.5

git-2.53.0

/nix/store/j0h35cv7avh30rlzsy4a17a77mgdz9a0-git-2.53.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3

glibc-2.40-66

/nix/store/jsrrm60pz13dd0h59549p329c8mli9qm-glibc-2.40-66.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-5702 5.6
https://nvd.nist.gov/vuln/detail/CVE-2025-5745 5.6
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42

/nix/store/2a5c0phmyaz0msmd81lfk8lw3pnh9db5-glibc-2.42.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42-51

/nix/store/j96x1lgha869bnfxxgrlqa7r6smvfgir-glibc-2.42-51.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42-51-source-unsecvars

/nix/store/7h79siz1sp8b6vyy6w8505yd6lbc1gfa-glibc-2.42-51-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

go-1.24.13-linux-amd64-bootstrap

/nix/store/sjm9jwacjcz1rgkcdn7c0x4ny9k78m5f-go-1.24.13-linux-amd64-bootstrap.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

go-1.24.13-linux-386-bootstrap

/nix/store/mxp7s4yb95nr8r2pafckisf3ilcfrf1v-go-1.24.13-linux-386-bootstrap.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

go-1.26.1

/nix/store/f7rh1lw0shd5471j9y6wpvc2j43czglz-go-1.26.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

gstreamer-1.26.5

gzip-1.2.4

/nix/store/njb7mqx3y9izjbg1l7nfmwl4jynv5vbk-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8

hedgehog-1.5

/nix/store/6xpy6s0pg9r5ii2ya9zzjywcsy5xcmk8-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

hedgehog-1.5-r2.cabal

/nix/store/2y1li1rch0v8ggdiy5sx40gbzwx4xis1-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

imagemagick-7.1.2-17

/nix/store/3haj9wj9n3ja4gwvr4wgvl4nc9a73y2r-imagemagick-7.1.2-17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-33536 5.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33535 4.0

inetutils-2.7

/nix/store/gy2fjj4dhiadhy9zan3dc2h0n4fvjiil-inetutils-2.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-28372 7.4

jam-2.6.1

/nix/store/9c2f1q5p4dk70rjqks1rnm9x4l7dkk2i-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jam-2.6.1.tar

/nix/store/llg2rlfh3mziwc3qqwbk98h2w4qr0xaq-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jbig2dec-0.20

/nix/store/mgj2d25j821c7rp37a28sqs8kw0bwjia-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

jose-0.11

/nix/store/zm7hdmbcxkb9dcwgqmypbxqfc9a2hkba-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9

lapack-3

/nix/store/a87kmsilipj8isb3pip9yfw9010xw2gw-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libde265-1.0.16

/nix/store/bj1w5k6g6ylf1jl9hr9f74iwzl11kjyf-libde265-1.0.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-33164 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-61147 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33165 5.5

libinput-1.29.2

/nix/store/rjj1w55q25m0q0311w76y2sr7l5qs14d-libinput-1.29.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-35093 8.8

libmemcached-1.0.18

/nix/store/1wh7pf3xg15mawgzg3s3cklkl8lspqni-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmicrohttpd-1.0.2

/nix/store/iyk5y7y5n8v49czls5smps33whgqh8j1-libmicrohttpd-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5

libmpeg2-0.5.1

/nix/store/wy5gvscxcpifkakw7rlw9kpk20k2cb5x-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libpng-1.2.59

/nix/store/jng1szxyfjfs1j8hv58hz0cknjfi9n32-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1

libpng-1.6.55

/nix/store/ckj9j7nk7klgqipqbbyl95q7aqcygs7y-libpng-1.6.55.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-33636 7.6
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5

libsndfile-1.2.2

/nix/store/4pxzi4njbyxrvm8b9p363hadwvg73h8n-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3

libssh-0.11.3

/nix/store/wn8ndr9f7irxqjcznfac9b85c1ndnv7i-libssh-0.11.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-0967 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-3731 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-0965 3.3
https://nvd.nist.gov/vuln/detail/CVE-2026-0968 3.1

lua-5.2.4

/nix/store/zl44zga2k9ap5q80bz4d5smxhr95nxlh-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

lua-5.2.4-env

/nix/store/nbwmwazi4pazwjdxnpl0vzavd8l65nbb-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

malcontent-0.13.1

/nix/store/ybj5gbsnvj6kp8hhvxj0qn08q3av1l17-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3

memcached-1.6.40

/nix/store/1kg3h3mf201p8cch74xf04j2wr2bcnbj-memcached-1.6.40.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8

mercurial-7.1.2

/nix/store/nwlklm7pzz7ffmi4qsvzj1h8c22wsqj0-mercurial-7.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor

/nix/store/jrfwajflj4lbfw0ic567dq45fa8nxn6r-mercurial-7.1.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor-staging

/nix/store/qs4yg15q3xzk7v95c5yb1lcxxfb1gz18-mercurial-7.1.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

musl-1.2.5

/nix/store/gvsgnjc5mvkd27xwvmcysz28agyc1zvv-musl-1.2.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-26519 8.1

nemo-6.6.4

/nix/store/1zmk59cilh93js7jl1av6v5rcparxlhf-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1

network-3.2.8.0

nghttp2-1.67.1

/nix/store/61l6j9ky582qxlyhirx292iv5x2m7bjg-nghttp2-1.67.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27135 7.5

nghttp2-1.67.1

/nix/store/xzl25j7csyrcmk26yrvggwvhhk2iq8qg-nghttp2-1.67.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27135 7.5

ninja-1.13.2

/nix/store/hglz6nmad76xjgddrwfvdpjm6wjzx5v9-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5

nix-0.29.0

/nix/store/bf9i1qcfn164h69j6pv1ks0yd3g7zz26-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

nix-0.31.1

/nix/store/biz98mmxr1p6rll4v64mjqq4ffnccqzs-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

openexr-3.3.5

openssh-10.2p1

/nix/store/wvffj7w0m2xhwzpv7vqmq9xyr5qk4bgd-openssh-10.2p1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-35414 4.2

openvswitch-3.7.1

/nix/store/25rd784dyx6zr6y70vivksnqkphad0l4-openvswitch-3.7.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1

orc-0.4.41

/nix/store/k20przak4sz4qppksmjfk3nzcyb4nwwh-orc-0.4.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8

php-calendar-8.4.19

/nix/store/dhh0637bhcr624fv3cf93y3fx62z7jc9-php-calendar-8.4.19.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5

pip-20.3.4-source

/nix/store/cqbms8x1ck6ybfn88q6v6ppjn19vvgq4-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5

pods-2.3.0

pods-2.3.0-vendor

pods-2.3.0-vendor-staging

polkit-1.pam

/nix/store/ivsdw32svfxb5mizvqigpysq3a7adsd0-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.12

python-3.14.2

/nix/store/nbcafydzi77wphyy84i0mwhihb1igx7x-python-3.14.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8

rubygems-3.7.2

/nix/store/sds8w87mg368xbpkdr5cav2mmsiimddn-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3

safe-0.3.21

safe-0.3.21-r1.cabal

sassc-3.6.2

/nix/store/fn0dd2ma49nhqy3dxf64vs779mzx5inz-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

setuptools-44.0.0-source

/nix/store/x5q24iw1xgf4xkl4h4kfq1pisp6l6hmm-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

shellcheck-0.11.0

/nix/store/rf1yiv12fh2r6b8n46s0fj27rmnar8nv-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

snappy-1.2.2

/nix/store/hcydnrs0kr1sdj9mqz772vlp8qhp4cls-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

stringbuilder-0.5.1

/nix/store/jzng3qcsmd5fpy08gb68ahjkngmhg61k-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2

subversion-1.14.5

/nix/store/xas086v2wb638wfa6nkl5syczbkjzf1z-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3

systemd-2.4.0

/nix/store/dn670pjwcpxhgh1abqmv5xa6qhsid7zp-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7

taglib-1.13.1

/nix/store/4np0c11bmvdfrnh8g4lzmz8s76vqvp39-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9

tap-1.0.1

/nix/store/ggiqmlxr7lbrk3jqkl1iw4r8mz1l6fag-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

tar-0.6.4.0

tar-0.6.4.0-r4.cabal

thunderbird-148.0.1

vault-0.3.1.6

vim-9.2.0106

/nix/store/f98s2zz295za02hy3bmvka0263qjywxh-vim-9.2.0106.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34714 9.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33412 5.6

warp-3.4.9

websockets-0.13.0.0

/nix/store/i7yqwmd84a3pwx98b48iy6c9j5pyz7bg-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

websockets-0.13.0.0-r5.cabal

/nix/store/skfby3wfasal6a3f0r585npcfgmij849-websockets-0.13.0.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

wheel-0.37.1-source

/nix/store/nyig7aby0dqn9qggd37wqk8f5qbl5jqz-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

word-wrap-0.5

/nix/store/2vhg3s003304wgd1nznndrsk40hiwl8c-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3

yaml-0.11.11.2

/nix/store/d7mhv2mi47bxn2jcizwkqp34kj3a50mx-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/zmp6gyc7l6d9vqh54567mqyjjs7ix7z8-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yarn-1.22.22

/nix/store/v5q8zcdnc68lpp2pw92bwdk6a1h0sahb-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3

yasm-1.3.0

yoke-0.8.1

/nix/store/fmsyys5rlihkcsc45r88vwzh12nff02g-yoke-0.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26056 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-26055 7.5

zlib-0.7.1.1

/nix/store/j205jwm7g4di5l2vliwc7lb4gh1dg333-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

zlib-1.3.1

/nix/store/v7bgrl0gqijmpm9gx71bhzb855bm224x-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9

zlib-1.3.2

/nix/store/dq64sfg001s4aj0hh95y75czabk771qx-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

chore: update flake.lock & sources (2026-04-18)

159de05

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Reputable2772 merged commit 3048da8 into master Apr 18, 2026
1 check passed

Reputable2772 deleted the flake-update/2026-16 branch April 18, 2026 18:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update flake.lock & sources (2026-04-18) - #90

chore: update flake.lock & sources (2026-04-18)#90
Reputable2772 merged 1 commit into
masterfrom
flake-update/2026-16

Reputable2772 commented Apr 18, 2026

Uh oh!

github-actions Bot commented Apr 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Reputable2772 commented Apr 18, 2026

Uh oh!

github-actions Bot commented Apr 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant