Skip to content

chore: update flake.lock & sources (2026-05-02)#92

Merged
Reputable2772 merged 3 commits into
masterfrom
flake-update/2026-18
May 3, 2026
Merged

chore: update flake.lock & sources (2026-05-02)#92
Reputable2772 merged 3 commits into
masterfrom
flake-update/2026-18

Conversation

@Reputable2772

Copy link
Copy Markdown
Owner

Automated Pull Request for Week 18

Flakes Changelog:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/3107b77cd68437b9a76194f0f7f9c55f2329ca5b' (2026-04-01)
  → 'github:hercules-ci/flake-parts/5250617bffd85403b14dbf43c3870e7f255d2c16' (2026-05-01)
• Updated input 'flake-parts/nixpkgs-lib':
    'github:nix-community/nixpkgs.lib/333c4e0545a6da976206c74db8773a1645b5870a' (2026-03-29)
  → 'github:nix-community/nixpkgs.lib/f5901329dade4a6ea039af1433fb087bd9c1fe14' (2026-04-26)
• Updated input 'home-manager':
    'github:nix-community/home-manager/5826802354a74af18540aef0b01bc1320f82cc17' (2026-04-25)
  → 'github:nix-community/home-manager/9ce9f7f128c5834bb71a4f5c62232187371379b6' (2026-05-02)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/c43246d4e9e506178b69baed075d797ec2d873e2' (2026-04-22)
  → 'github:nix-community/nix-index-database/b8eb7acee0f7604fe1bf6a5b3dcf5254369180fa' (2026-04-26)
• Updated input 'nix-index-database/nixpkgs':
    'github:NixOS/nixpkgs/4bd9165a9165d7b5e33ae57f3eecbcb28fb231c9' (2026-04-14)
  → 'github:NixOS/nixpkgs/0726a0ecb6d4e08f6adced58726b95db924cef57' (2026-04-22)
• Updated input 'nix4vscode':
    'github:nix-community/nix4vscode/aeaa8983f0abd865c2363bd634a03db27b8b3857' (2026-04-25)
  → 'github:nix-community/nix4vscode/add1b8d6026aedc59c4105e4c6d232feb9e38abf' (2026-05-02)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/0726a0ecb6d4e08f6adced58726b95db924cef57' (2026-04-22)
  → 'github:NixOS/nixpkgs/15f4ee454b1dce334612fa6843b3e05cf546efab' (2026-04-30)
• Updated input 'nur':
    'github:nix-community/NUR/05030429b1bbb7a41ec51e479a9d8cd0695c3e9b' (2026-04-25)
  → 'github:nix-community/NUR/e45ee2e0defd299181f87eec923a5a9246fc7366' (2026-05-02)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/0726a0ecb6d4e08f6adced58726b95db924cef57' (2026-04-22)
  → 'github:nixos/nixpkgs/15f4ee454b1dce334612fa6843b3e05cf546efab' (2026-04-30)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/8486e82fd1b2bab54868139ac2263de54c9c85c7' (2026-04-24)
  → 'github:Gerg-L/spicetify-nix/501256c3e670ca1679501ce3839ea805df00d8ba' (2026-04-26)
• Updated input 'stylix':
    'github:danth/stylix/84971726c7ef0bb3669a5443e151cc226e65c518' (2026-04-22)
  → 'github:danth/stylix/20ff51f523e2dd67e5f31a321719d30708c1b771' (2026-04-30)

Sources Changelog:

No changes!

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Reputable2722 <153411261+Reputable2772@users.noreply.github.com>
Signed-off-by: Reputable2722 <153411261+Reputable2772@users.noreply.github.com>
@github-actions

github-actions Bot commented May 2, 2026

Copy link
Copy Markdown

Profile diff:

warning: unknown experimental feature 'pipe-operators'
55-nixos-aslr-entropy.conf: ∅ → ε
aquamarine: 0.10.0 → 0.11.0, +17.8 KiB
crun: 1.27 → 1.27.1, -85.3 KiB
curl-impersonate: 1.5.2 → 1.5.5
deno: 2.7.12 → 2.7.13, -255.0 KiB
easyeffects: 8.2.0 → 8.2.1, +425.6 KiB
electron: 39.8.7 → 39.8.9
electron-unwrapped: 39.8.7 → 39.8.9, +8.0 KiB
fastfetch: 2.62.0 → 2.62.1
firefox: 150.0 → 150.0.1
firefox-unwrapped: 150.0 → 150.0.1, -461.0 KiB
fzf: 0.71.0 → 0.72.0, +22.2 KiB
hyperv-daemons: 7.0.1 → 7.0.3
hyperv-daemons-bin: 7.0.1 → 7.0.3
hyprpanel: 0-unstable-2026-03-23 → 0-unstable-2026-04-23
hyprpaper: 0.8.3 → 0.8.4
hyprwire: 0.3.0 → 0.3.1, +9.5 KiB
ibq8c13nbi14wiz4kmgyk3iay9g8kwid: ε → ∅, -385.6 KiB
initrd-linux: 7.0.1 → 7.0.3, +91.4 KiB
intel-media-driver: 26.1.2 → 26.1.6, +468.0 KiB
kvantum: ∅ → ε
kvantum.kvconfig: ε → ∅
libblake3: 1.8.4 → 1.8.5
libphonenumber: 9.0.28 → 9.0.29, +25.6 KiB
librewolf: 149.0.2-2 → 150.0-1
librewolf-unwrapped: 149.0.2-2 → 150.0-1, +1798.6 KiB
linux: 7.0.1 → 7.0.3, +11.8 KiB
lsof: 4.99.5 → 4.99.6
nano: 8.7.1 → 9.0, +93.6 KiB
nh: 4.3.1 → 4.3.2
nh-unwrapped: 4.3.1 → 4.3.2, +10.5 KiB
nix-index: 0.1.9-unstable-2026-02-05 → 0.1.9-unstable-2026-04-20, +4455.3 KiB
nix-index-with-full-db: 0.1.9-unstable-2026-02-05 → 0.1.9-unstable-2026-04-20
nixos: 26.05.20260422.0726a0e → 26.05.20260430.15f4ee4, +1092.2 KiB
nixos-system-lenovo-laptop: 26.05.20260422.0726a0e → 26.05.20260430.15f4ee4
nixos-system-rescue: 26.05.20260422.0726a0e → 26.05.20260430.15f4ee4
nss: 3.123 → 3.123.1
ntfs3g: 2022.10.3 → 2026.2.25, +12.7 KiB
obs-studio: 32.1.1 → 32.1.2
packagekit: 1.3.3 → 1.3.5, +313.2 KiB
podman: 5.8.1 → 5.8.2, +46.2 KiB
podman-docker-compat: 5.8.1 → 5.8.2
proton-vpn: 4.15.2 → 4.15.3, -83.8 KiB
proton-vpn-cli: 1.0.0 → 1.0.1
python3.13-proton-vpn-api-core: 4.19.1 → 5.0.1, +86.4 KiB
starship: 1.24.2 → 1.25.0, +312.6 KiB
strace: 6.19 → 7.0, +1076.9 KiB
thin-provisioning-tools: 1.3.1 → 1.3.2
thunderbird: 149.0.2 → 150.0
thunderbird-unwrapped: 149.0.2 → 150.0, +439.4 KiB
tree: 2.3.1 → 2.3.2
turbostat: 7.0.1 → 7.0.3
uriparser: 1.0.0 → 1.0.1
vscode-extension-pkief-material-icon-theme: 5.33.1 → 5.34.0, +20.0 KiB
wrapped-obs-studio: 32.1.1 → 32.1.2
x86_energy_perf_policy: 6.18.24 → 6.18.26
xdg-desktop-portal-hyprland: 1.3.11 → 1.3.12, -21.0 KiB
xwayland: 24.1.10 → 24.1.11
yfyw13a6lhyrclka4nppmqazsh3325y3: ∅ → ε, +385.6 KiB

Vulnerabilities in closure:
126 derivations with active advisories


Diff-1.0.2

/nix/store/r4vqq3r43zb14ji6wsfaa3wj97qc1r22-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1


ShellCheck-0.11.0

/nix/store/ll3afsqfbalx77jgvg6s6491ivpq2ihp-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8


accountsservice-23.13.9

/nix/store/x7hs4gprwfmf744dgvcbj7h4adsvf821-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 8.1


ada-3.4.4

/nix/store/x3ic9hcmdl2y4w1k78z9w6ry8214h62b-ada-3.4.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3


async-2.2.6

/nix/store/kdbiwsi2yh0kxrn45bfsd84q57620f5q-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8


avahi-0.8

/nix/store/qj7g11iyh5mvar82vqpr4piyzbp65435-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68471 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-24401 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68276 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-34933 5.5


binutils-2.44

/nix/store/agb7l8ahkha2g3wck36964d85lzqd5jv-binutils-2.44.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-69649 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69650 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69647 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69648 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69652 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69645 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69646 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69651 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-5244 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-5245 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-69644 5.0
https://nvd.nist.gov/vuln/detail/CVE-2025-3198 3.3
https://nvd.nist.gov/vuln/detail/CVE-2025-8224 3.3
https://nvd.nist.gov/vuln/detail/CVE-2025-8225 3.3
https://nvd.nist.gov/vuln/detail/CVE-2025-1153 3.1


binutils-2.46

/nix/store/h49a9wag39v22lciqxy7839mvz3qvvls-binutils-2.46.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-69649 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69650 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69652 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69651 5.5


bolt-0.9.8

/nix/store/2z505z1asyhbhgc3j6k4rxib8l36g1ph-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5


busybox-1.37.0

/nix/store/a9c8fwpzzgm3w853mj9lv63vl3351r50-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-60876 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2


bytes-1.11.0

/nix/store/jwq7bhjhw9wd5wlzc224qksy55vsz1c7-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5


capstone-5.0.7

/nix/store/0y82c4abl4i24h0j7qhw020iibb0cl5w-capstone-5.0.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8


cargo-1.90.0-x86_64-unknown-linux-gnu

/nix/store/yvz53fy7sk6ksigqx5nzwfg9hg5jz3rg-cargo-1.90.0-x86_64-unknown-linux-gnu.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4


cargo-1.94.1

/nix/store/kmmplvnz8rxg8x1h7mc13f5pz3mrsw3v-cargo-1.94.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4


commonmark-0.2.6.1

/nix/store/m7a5wrm9n4if64ihx2vjdvi5rg1nqjj3-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1


cryptography-46.0.6-vendor

/nix/store/rkzbqxc6xpnlqaa4waanvh6fgws0fcli-cryptography-46.0.6-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39892 9.8


cryptography-46.0.6-vendor-staging

/nix/store/zyy6wrpfw9nlawyg0d09r0v9q8pr58bc-cryptography-46.0.6-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39892 9.8


cups-2.4.16

/nix/store/0gxcafsvq7jpic92a66yzd86y9xsfdvi-cups-2.4.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34990 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-34980 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7
https://nvd.nist.gov/vuln/detail/CVE-2026-34978 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-34979 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-27447 4.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41079 4.3
https://nvd.nist.gov/vuln/detail/CVE-2026-39314 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-39316 4.0


curl-0.4.49

/nix/store/wryw603fv0wkjxvq1qw9jsc60kvgk1ip-curl-0.4.49.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-32221 9.8
https://nvd.nist.gov/vuln/detail/CVE-2022-27781 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27782 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-28319 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27776 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-32206 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-43552 5.9
https://nvd.nist.gov/vuln/detail/CVE-2023-28320 5.9
https://nvd.nist.gov/vuln/detail/CVE-2023-28321 5.9
https://nvd.nist.gov/vuln/detail/CVE-2022-35252 3.7
https://nvd.nist.gov/vuln/detail/CVE-2023-28322 3.7


dash-0.5.13.2

/nix/store/a8liv1rn8a4k82k3gfxiq9731l614agy-dash-0.5.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5


dbus-0.9.10

/nix/store/ccdhbzd787rv1lg05mhpgc34bcczsaja-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5


dbus-1

/nix/store/z7826jp2kf1r6imcx5cldzyykmpjy8cg-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5


exiv2-0.28.8

/nix/store/c3znb6apk0fpgrppbagrfs1f10wghskp-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3


ffmpeg-7.1.3

/nix/store/np37z87cvrndj2f0qyv7mxp8myhz0vr5-ffmpeg-7.1.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-51795 8.0
https://nvd.nist.gov/vuln/detail/CVE-2023-51791 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-51793 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-51794 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-51798 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-30997 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-30998 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-30999 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-51797 6.7
https://nvd.nist.gov/vuln/detail/CVE-2025-22921 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25469 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-10256 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-40962 4.9
https://nvd.nist.gov/vuln/detail/CVE-2023-51796 3.6
https://nvd.nist.gov/vuln/detail/CVE-2025-12343 3.3


ffmpeg-8.0.1

/nix/store/iy237hllm88g096kwv2sqxrlyqx4pdak-ffmpeg-8.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-51795 8.0
https://nvd.nist.gov/vuln/detail/CVE-2023-51791 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-51793 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-51794 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-51798 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-30997 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-30998 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-30999 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-51797 6.7
https://nvd.nist.gov/vuln/detail/CVE-2025-22921 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-25469 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69693 5.4
https://nvd.nist.gov/vuln/detail/CVE-2026-40962 4.9
https://nvd.nist.gov/vuln/detail/CVE-2023-51796 3.6
https://nvd.nist.gov/vuln/detail/CVE-2025-12343 3.3


filelock-0.1.1.9

/nix/store/qmq3ryb5nr0xr261cygslrgcqbgj93wp-filelock-0.1.1.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3


fontforge-20251009

/nix/store/pn4crb4z4swlrnsgarapi1yykklkawpj-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8


fontforge-20251009

/nix/store/rdfmfg4giy9vzx2aby4zvdxbgksk0lqp-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8


freerdp-3.24.2

/nix/store/bdafflv18dm9w7kgwqfg93rz2wv0lrmr-freerdp-3.24.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-40254 4.2


gcc-4.6.4

/nix/store/1xi2ynqfjwj4kzbqkxvp2pbb47nrj2p7-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8


gcc-10.4.0

/nix/store/6mqahlwr5wxgjixr8cwxzghybg62gx52-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8


gcc-14.3.0

/nix/store/7i0f5gfas6iija8i31l7b2bdjpiv779i-gcc-14.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8


gcc-15.2.0

/nix/store/xkqq5nfq64z3i6pj00h41sawblr1yns9-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8


gcc-15.2.0

/nix/store/4v7xi5lfcawbj38zqmdj7ylbx4h2xyh2-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8


giflib-5.2.2

/nix/store/scjnpnzk0sv4nnzdcwsnpnqq3aciawfd-giflib-5.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26740 8.2
https://nvd.nist.gov/vuln/detail/CVE-2024-45993 6.5


git-2.53.0

/nix/store/gz2q1wq6ckyphg0q08nq9q93g1a6x561-git-2.53.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66413 7.4
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3


glibc-2.40-66

/nix/store/jsrrm60pz13dd0h59549p329c8mli9qm-glibc-2.40-66.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-5702 5.6
https://nvd.nist.gov/vuln/detail/CVE-2025-5745 5.6
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4


glibc-2.42

/nix/store/hy6gc1fbqcf9gnfj7n2dx7hnlixybnvj-glibc-2.42.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4


glibc-2.42-61

/nix/store/r539m16q2dfam1cazdgqn3f8ch6dl6w6-glibc-2.42-61.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4


glibc-2.42-61-source-unsecvars

/nix/store/s202i4bhqpac60imnvbwc259sjy72v9p-glibc-2.42-61-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4


go-1.24.13-linux-amd64-bootstrap

/nix/store/kb5i2zr888y4lxf22pgxrbhwjdv4g8za-go-1.24.13-linux-amd64-bootstrap.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27143 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-27140 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32280 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32283 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-27144 7.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32282 6.4
https://nvd.nist.gov/vuln/detail/CVE-2026-27142 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32289 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32288 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9
https://nvd.nist.gov/vuln/detail/CVE-2026-27139 2.5


go-1.24.13-linux-386-bootstrap

/nix/store/pja21r0xbm1ms2xn8m9dkc9lyd5dvb43-go-1.24.13-linux-386-bootstrap.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27143 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-27140 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32280 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-32283 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-27144 7.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32282 6.4
https://nvd.nist.gov/vuln/detail/CVE-2026-27142 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32289 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-32288 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9
https://nvd.nist.gov/vuln/detail/CVE-2026-27139 2.5


go-1.26.2

/nix/store/5a501r66jxszbpw9af1q1a5z3rnrcmfs-go-1.26.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9


gstreamer-1.26.11

/nix/store/csiw5s9xqkzbk19c9f0qh49p4hzyb51l-gstreamer-1.26.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-3083 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-3085 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-2920 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-2921 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-2922 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-2923 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-3081 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-3082 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-3084 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-3086 7.8


gzip-1.2.4

/nix/store/myyqbqqd8ky9k4czrqhwlcnkw5mnlg3v-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8


hedgehog-1.5

/nix/store/jfyqjkpd9s4wxw5qcn21nqmws4ajv17f-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1


hedgehog-1.5-r2.cabal

/nix/store/bx3k3m7rsr6hvsk7xqpafdcdyrf7s67h-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1


jam-2.6.1

/nix/store/a65v12n21hgcg60idfp02l141d8cyqrv-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3


jam-2.6.1.tar

/nix/store/5r2czhqjhpxhirakg8n8anqi4y9z2isq-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3


jbig2dec-0.20

/nix/store/x9ahbqggrmvmskibrml5xqiiv00jf81q-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5


jose-0.11

/nix/store/fqhvpjjmifia8rm0fh5z853icnw3w9wb-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9


jq-1.8.1

/nix/store/b7xrk5idxkza33wiaizqzs9fqzvw5lqb-jq-1.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32316 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33947 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3


jq-1.8.1

/nix/store/wdskdcvg3n146wp626vpzxw9wh3c07rg-jq-1.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32316 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33947 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3


jq-1.8.1-binlore

/nix/store/qs9il3kw75z712zklcl1nfl23hd0i4dd-jq-1.8.1-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3


lapack-3

/nix/store/zhar788xkvfn6z3ps40c6lv9kix1z5li-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1


libexif-0.6.25

/nix/store/2ksgzkynh6h7gp0f4xykblr7fw463x0q-libexif-0.6.25.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32775 7.4
https://nvd.nist.gov/vuln/detail/CVE-2026-40385 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-40386 4.0


libgcrypt-1.11.2

/nix/store/y0w54m2s46nq5lxq2lm2cmy5lnhghcd2-libgcrypt-1.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41989 6.7


libinput-1.29.2

/nix/store/ls5hz61xh0kbl5bygidkfy4vmhphm0a4-libinput-1.29.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-35093 8.8


libmemcached-1.0.18

/nix/store/2mwnc6ma835zw8js8ffq0vvxk94yxsf9-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5


libmicrohttpd-1.0.2

/nix/store/yqrkzd6i743lf0i1i4y0vg70h3ivbpdi-libmicrohttpd-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5


libmpeg2-0.5.1

/nix/store/r3lirr4kmdzc81nif4q34ns108sr1cls-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5


libpng-1.2.59

/nix/store/cjp1c9rqz7bbh5arh5ch4dy1hq6mhasc-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1


libraw-0.22.0

/nix/store/b1zp8gl991gam1v7xh9rrzb1i33xl5l1-libraw-0.22.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-20889 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-20911 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-21413 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-24660 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-5342 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-5318 4.3


libsndfile-1.2.2

/nix/store/7qn20df24p9a7fx5vzhwpd6c7xr9g7w8-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-37555 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3


lua-5.2.4

/nix/store/zq02h607zryv87k20drc1cd5gp8364ax-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5


lua-5.2.4-env

/nix/store/88ph5ayhcirinjq1iim1pma0gy2hh0dd-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5


malcontent-0.13.1

/nix/store/dlyqsp3hd3qsck8d1llcyalxs0pn09yh-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3


memcached-1.6.41

/nix/store/yrx4cwwvikhs7958qfvbacyl0x0rw31v-memcached-1.6.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8


mercurial-7.1.2

/nix/store/ssrf5i9272bbvlimn0zfi5x16nfnh9jv-mercurial-7.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3


mercurial-7.1.2-vendor

/nix/store/6w5m14zv8iq766ykaz8cmszdhybh43p6-mercurial-7.1.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3


mercurial-7.1.2-vendor-staging

/nix/store/n27z6skwig0625l0fzy662x6jfc3j6f6-mercurial-7.1.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3


nemo-6.6.4

/nix/store/a531g024sbl7ys1yfl4wha47s9qs6wb9-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1


network-3.2.8.0

/nix/store/8s7dvbmai60ckli37rs0rgdcfz54z9l4-network-3.2.8.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-35047 9.9
https://nvd.nist.gov/vuln/detail/CVE-2021-35049 9.9
https://nvd.nist.gov/vuln/detail/CVE-2021-35048 9.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24388 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24389 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24390 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24391 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24392 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24393 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-24394 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35050 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-0486 4.4
https://nvd.nist.gov/vuln/detail/CVE-2022-0997 3.9


ninja-1.13.2

/nix/store/8zcxifany2k5ndz3k167a5akzhh93qv7-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5


nix-0.29.0

/nix/store/79w1lcacc2k45xig9q3zknvvgdcv4wfy-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3


nix-0.31.1

/nix/store/gl5zaflbl8lm7y8kiiriapy2084sw5wv-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3


openexr-3.3.8

/nix/store/w3cn1cc634qmcvpa93vgs0scnfdblgq8-openexr-3.3.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-12495 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-12839 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-12840 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-34588 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-34543 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-34544 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-34379 7.1
https://nvd.nist.gov/vuln/detail/CVE-2026-40244 7.1
https://nvd.nist.gov/vuln/detail/CVE-2026-40250 7.1
https://nvd.nist.gov/vuln/detail/CVE-2026-34380 5.9
https://nvd.nist.gov/vuln/detail/CVE-2026-34589 5.0


openssl-3.6.1

/nix/store/0xzww08r9rgw31nnh34kzbwj9d4gxrbk-openssl-3.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-31789 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-28387 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-28386 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28388 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28389 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28390 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31790 7.5


openvswitch-3.7.1

/nix/store/m2qxb9m3hb5h2i5h8s5gjx0h3yszy9wg-openvswitch-3.7.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1


orc-0.4.41

/nix/store/vkrsl22bjnabsl3079czvbxk6bg883lf-orc-0.4.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8


perl-5.40.0

/nix/store/vif7qliqzlzmccf90d0412dkgnq523c5-perl-5.40.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8


perl-5.42.0

/nix/store/0ydjk9mjp4g0v8yq3nl1d4c7f49c3pdn-perl-5.42.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8


perl-5.42.0-binlore

/nix/store/lkir2dn7230jnszbvcrhxylx1ag3rsb6-perl-5.42.0-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8


perl-5.42.0-env

/nix/store/xr1px3z21h01psivm3d7qcl3dk1ana3v-perl-5.42.0-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8


php-calendar-8.4.20

/nix/store/n9fdjgb6qnwfxav1qlg2ws53s9957zby-php-calendar-8.4.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5


pip-20.3.4-source

/nix/store/5pyxs7z8qjifq85wrby0f55ymzih3vq1-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5


pods-2.3.0

/nix/store/zacw334bq8isn0kj3q310d9wsaqnd5y1-pods-2.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6967 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6999 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-23790 7.1
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2021-24338 5.4
https://nvd.nist.gov/vuln/detail/CVE-2021-24339 5.4
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6965 4.3


pods-2.3.0-vendor

/nix/store/pszhv6riz0ppqfzyiypfvz9dii4vf10c-pods-2.3.0-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6967 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6999 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-23790 7.1
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2021-24338 5.4
https://nvd.nist.gov/vuln/detail/CVE-2021-24339 5.4
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6965 4.3


pods-2.3.0-vendor-staging

/nix/store/8q2pncf7x6lz1g0bqn1q9fxd19f90g3q-pods-2.3.0-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-1446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6967 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6999 8.8
https://nvd.nist.gov/vuln/detail/CVE-2023-23790 7.1
https://nvd.nist.gov/vuln/detail/CVE-2024-11849 6.1
https://nvd.nist.gov/vuln/detail/CVE-2021-24338 5.4
https://nvd.nist.gov/vuln/detail/CVE-2021-24339 5.4
https://nvd.nist.gov/vuln/detail/CVE-2024-9883 4.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6965 4.3


polkit-1.pam

/nix/store/6ykr0729dm2ic7rr1s4hkzn2pz9xy28k-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8


python-2.7.18.12

/nix/store/k326p1fg746b8wpphxas58iwlxi8qzzp-python-2.7.18.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-48565 9.8
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2024-9287 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8
https://nvd.nist.gov/vuln/detail/CVE-2022-0391 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-45061 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-48560 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-24329 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-36632 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-6232 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-7592 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-13836 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-26488 7.0
https://nvd.nist.gov/vuln/detail/CVE-2021-3733 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-48564 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-23336 5.9
https://nvd.nist.gov/vuln/detail/CVE-2022-48566 5.9
https://nvd.nist.gov/vuln/detail/CVE-2025-6075 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-13837 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-40217 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-12084 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-12781 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-4519 3.3


python-3.14.2

/nix/store/yr8jdsv7xy6k3hnjhvqa9sm6n987k1sf-python-3.14.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-4519 3.3


rubygems-3.7.2

/nix/store/b7f1aw9my22s9ii0v13mrlw7ldd9y0a7-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3


safe-0.3.21

/nix/store/p0gp6jvzbypcb6hnlr4f1zigh1qlb7l3-safe-0.3.21.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-38164 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-47524 5.4
https://nvd.nist.gov/vuln/detail/CVE-2021-40835 4.6
https://nvd.nist.gov/vuln/detail/CVE-2021-40834 4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-44751 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28868 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28869 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28870 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28872 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28873 4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-33594 3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33595 3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33596 3.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38163 3.5


safe-0.3.21-r1.cabal

/nix/store/1c64xgmnjkl1rc7dj04rgk3akzf21zwm-safe-0.3.21-r1.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-38164 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-47524 5.4
https://nvd.nist.gov/vuln/detail/CVE-2021-40835 4.6
https://nvd.nist.gov/vuln/detail/CVE-2021-40834 4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-44751 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28868 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28869 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28870 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28872 4.3
https://nvd.nist.gov/vuln/detail/CVE-2022-28873 4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-33594 3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33595 3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33596 3.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38163 3.5


sassc-3.6.2

/nix/store/7p2g5jj8c448k0nckvaxdm96m95kqyy3-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5


setuptools-44.0.0-source

/nix/store/ss5ifyrx3c5ck5jswrynscqs8wc4c002-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9


shellcheck-0.11.0

/nix/store/4mn0nhhr5xpdy6qd3fpd8c0xrwamibp9-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8


snappy-1.2.2

/nix/store/351rfian65nm4v4fyw1dfrsmk3cc63ky-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8


stringbuilder-0.5.1

/nix/store/lysawwiyibl967jh2v87hhs2pk3j1xzv-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2


subversion-1.14.5

/nix/store/5fvv2lmv8h75c83822368qka7a66md87-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3


systemd-2.4.0

/nix/store/b6c74v1qsygghqjv64mggnxq2yny52xa-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-40225 6.4
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7


taglib-1.13.1

/nix/store/h3r97izlfq453c1ymrismhfa4hl52i4d-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9


tap-1.0.1

/nix/store/987ps5krzldnwgymviq1nzaqh1q40rww-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4


tar-0.6.4.0

/nix/store/15wmniahkb5mbaghzkxv71kiaif7hadc-tar-0.6.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-23950 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-32803 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-32804 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37701 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37712 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37713 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-24842 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-26960 7.1
https://nvd.nist.gov/vuln/detail/CVE-2024-28863 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-29786 6.3
https://nvd.nist.gov/vuln/detail/CVE-2023-39804 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-23745 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-48303 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31802 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-45582 4.1
https://nvd.nist.gov/vuln/detail/CVE-2021-20193 3.3


tar-0.6.4.0-r4.cabal

/nix/store/sy6hp80k9aw0cr8bxiyw9zc9lxlg3n35-tar-0.6.4.0-r4.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-23950 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-32803 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-32804 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37701 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37712 8.2
https://nvd.nist.gov/vuln/detail/CVE-2021-37713 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-24842 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-26960 7.1
https://nvd.nist.gov/vuln/detail/CVE-2024-28863 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-29786 6.3
https://nvd.nist.gov/vuln/detail/CVE-2023-39804 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-23745 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-48303 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31802 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-45582 4.1
https://nvd.nist.gov/vuln/detail/CVE-2021-20193 3.3


thunderbird-150.0

/nix/store/s5q34jq9vnpql269z0n502kjkbcqkkc7-thunderbird-150.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-7320 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-7322 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-7323 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-7324 7.3


vault-0.3.1.6

/nix/store/8xc79nbxbr5i6s4jylhz3yn9nrgij3jq-vault-0.3.1.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-2048 8.1
https://nvd.nist.gov/vuln/detail/CVE-2021-27400 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-6337 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5807 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-6037 6.8
https://nvd.nist.gov/vuln/detail/CVE-2023-0620 6.5
https://nvd.nist.gov/vuln/detail/CVE-2023-0665 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-6014 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-8365 6.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3024 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-38554 5.3
https://nvd.nist.gov/vuln/detail/CVE-2022-41316 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-25000 5.0
https://nvd.nist.gov/vuln/detail/CVE-2025-4166 4.5
https://nvd.nist.gov/vuln/detail/CVE-2023-24999 4.4
https://nvd.nist.gov/vuln/detail/CVE-2023-2121 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-6011 3.7
https://nvd.nist.gov/vuln/detail/CVE-2021-41802 2.9


vim-9.2.0340

/nix/store/zvx0lzr62xi37a49dd1pwb9hcw4jy5sl-vim-9.2.0340.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41411 6.6


warp-3.4.9

/nix/store/dvzy6alj9zpgv1jkz9gwszsl4zwkxa1c-warp-3.4.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4428 8.9
https://nvd.nist.gov/vuln/detail/CVE-2022-2225 8.1
https://nvd.nist.gov/vuln/detail/CVE-2023-2754 7.4
https://nvd.nist.gov/vuln/detail/CVE-2023-1862 7.3
https://nvd.nist.gov/vuln/detail/CVE-2025-0651 7.1
https://nvd.nist.gov/vuln/detail/CVE-2023-0652 7.0
https://nvd.nist.gov/vuln/detail/CVE-2023-1412 7.0
https://nvd.nist.gov/vuln/detail/CVE-2022-3320 6.7
https://nvd.nist.gov/vuln/detail/CVE-2022-3512 6.7
https://nvd.nist.gov/vuln/detail/CVE-2022-2145 5.8
https://nvd.nist.gov/vuln/detail/CVE-2022-4457 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-0238 3.9
https://nvd.nist.gov/vuln/detail/CVE-2023-0654 3.9


websockets-0.13.0.0

/nix/store/wbiy8d9bfywlx3g8hmhd8fc59hp1iv6f-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9


websockets-0.13.0.0-r5.cabal

/nix/store/p95nbjw68cm9mcb5dkppaav8wmwlr9dq-websockets-0.13.0.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9


wheel-0.37.1-source

/nix/store/81cbyxkgaiqac14kn6vhnp6yf2vxfvz3-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5


word-wrap-0.5

/nix/store/9r7xq2rvzsl6ac1k6p25av7584pn1573-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3


xdg-dbus-proxy-0.1.6

/nix/store/vhhdrxmj96b0v9qk7ccn4682s80pj25h-xdg-dbus-proxy-0.1.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34080 5.5


xz-5.4.7

/nix/store/qgyzbksqicaw5fda7v490g5m57bzh76m-xz-5.4.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3


xz-5.8.1

/nix/store/c93ng76ibm84gip7ivblv7fm17yav91f-xz-5.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3


xz-5.8.2

/nix/store/gybip82sxvarqinbp7wx1ps22n9hgbnf-xz-5.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3


yaml-0.11.11.2

/nix/store/vqqzhc50yw43p2kw94b4nhacpbfxwd6h-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5


yaml-0.11.11.2-r2.cabal

/nix/store/5xmarhf49qi0g08ya827hac31whpxsm6-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5


yarn-1.22.22

/nix/store/rbbvzwlda6r56jhwsy8arvnq1clz5chz-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3


yasm-1.3.0

/nix/store/76pkly4mb6rwjygsgnz21f5kqsjh7h3i-yasm-1.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33454 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33455 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33456 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33457 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33458 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33459 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33460 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33461 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33462 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33463 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33464 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33465 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33466 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33467 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33468 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-30402 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-31972 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-31973 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-31974 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-51258 5.5
https://nvd.nist.gov/vuln/detail/CVE-2023-31975 3.3


yoke-0.8.1

/nix/store/502k6kibb643fmp77ncv0322mnda3rim-yoke-0.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26056 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-26055 7.5


zlib-0.7.1.1

/nix/store/qwni87k17z7w9kqp61wya25425r2q4c8-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0


zlib-1.3.1

/nix/store/y66rcdz3rdwrdxl0b3vjsllgvpwxqpcs-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9


zlib-1.3.2

/nix/store/rqz8g3rdk0jgy78v7dbf1jgr71if4wzp-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

@Reputable2772
Reputable2772 merged commit 63e4877 into master May 3, 2026
1 check passed
@Reputable2772
Reputable2772 deleted the flake-update/2026-18 branch May 3, 2026 02:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant