chore: update flake.lock & sources (2026-05-09) by Reputable2772 · Pull Request #93 · Reputable2772/NixOS

Reputable2772 · 2026-05-09T17:27:55Z

Automated Pull Request for Week 19

Flakes Changelog:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/5250617bffd85403b14dbf43c3870e7f255d2c16' (2026-05-01)
  → 'github:hercules-ci/flake-parts/0678d8986be1661af6bb555f3489f2fdfc31f6ff' (2026-05-05)
• Updated input 'home-manager':
    'github:nix-community/home-manager/9ce9f7f128c5834bb71a4f5c62232187371379b6' (2026-05-02)
  → 'github:nix-community/home-manager/fdb2ccba9d5e1238d32e0c4a3ec1a277efa80c1d' (2026-05-08)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/b8eb7acee0f7604fe1bf6a5b3dcf5254369180fa' (2026-04-26)
  → 'github:nix-community/nix-index-database/dd2d0e3f6ba00af01b9498f5697173bdc2524bee' (2026-05-08)
• Updated input 'nix-index-database/nixpkgs':
    'github:NixOS/nixpkgs/0726a0ecb6d4e08f6adced58726b95db924cef57' (2026-04-22)
  → 'github:NixOS/nixpkgs/549bd84d6279f9852cae6225e372cc67fb91a4c1' (2026-05-05)
• Updated input 'nix4vscode':
    'github:nix-community/nix4vscode/add1b8d6026aedc59c4105e4c6d232feb9e38abf' (2026-05-02)
  → 'github:nix-community/nix4vscode/bbd0ef811eb5b2e39056a4f52599b760a74861f2' (2026-05-09)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/15f4ee454b1dce334612fa6843b3e05cf546efab' (2026-04-30)
  → 'github:NixOS/nixpkgs/549bd84d6279f9852cae6225e372cc67fb91a4c1' (2026-05-05)
• Updated input 'nur':
    'github:nix-community/NUR/e45ee2e0defd299181f87eec923a5a9246fc7366' (2026-05-02)
  → 'github:nix-community/NUR/7e1afccfc684b26840cea94ffd79ab6ff7de7dbc' (2026-05-09)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/15f4ee454b1dce334612fa6843b3e05cf546efab' (2026-04-30)
  → 'github:nixos/nixpkgs/549bd84d6279f9852cae6225e372cc67fb91a4c1' (2026-05-05)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/501256c3e670ca1679501ce3839ea805df00d8ba' (2026-04-26)
  → 'github:Gerg-L/spicetify-nix/d0e921cc48aab6137d203a3eab19601dc2bdc0c3' (2026-05-03)
• Updated input 'stylix':
    'github:danth/stylix/20ff51f523e2dd67e5f31a321719d30708c1b771' (2026-04-30)
  → 'github:danth/stylix/18ed8d270231e067fe2739998479ed5d7c659c2c' (2026-05-06)
• Updated input 'stylix/base16-helix':
    'github:tinted-theming/base16-helix/d646af9b7d14bff08824538164af99d0c521b185' (2025-10-17)
  → 'github:tinted-theming/base16-helix/4d508123037e7851ad36ebf7d9c48b0e9e1eb581' (2026-04-21)
• Updated input 'stylix/firefox-gnome-theme':
    'github:rafaelmardojai/firefox-gnome-theme/179704030c5286c729b5b0522037d1d51341022c' (2026-04-03)
  → 'github:rafaelmardojai/firefox-gnome-theme/0f8ba203d475587f477e7ae12661bd8459e225b7' (2026-04-14)
• Updated input 'stylix/nixpkgs':
    'github:NixOS/nixpkgs/6201e203d09599479a3b3450ed24fa81537ebc4e' (2026-04-01)
  → 'github:NixOS/nixpkgs/1c3fe55ad329cbcb28471bb30f05c9827f724c76' (2026-04-27)
• Updated input 'stylix/nur':
    'github:nix-community/NUR/601971b9c89e0304561977f2c28fa25e73aa7132' (2026-04-03)
  → 'github:nix-community/NUR/5d55af01c0f86be583931fe99207fc56c14134b3' (2026-05-01)
• Updated input 'stylix/tinted-schemes':
    'github:tinted-theming/schemes/13b5b0c299982bb361039601e2d72587d6846294' (2026-03-04)
  → 'github:tinted-theming/schemes/5f868b3a338b6904c47f3833b9c411be641983a8' (2026-04-24)
• Updated input 'stylix/tinted-tmux':
    'github:tinted-theming/tinted-tmux/c3529673a5ab6e1b6830f618c45d9ce1bcdd829d' (2026-03-08)
  → 'github:tinted-theming/tinted-tmux/f798c2dce44ef815bb6b8f05a82135c7942d35ac' (2026-04-26)
• Updated input 'stylix/tinted-zed':
    'github:tinted-theming/base16-zed/b4d3a1b3bcbd090937ef609a0a3b37237af974df' (2026-03-07)
  → 'github:tinted-theming/base16-zed/5768d08ed2e7944a26a958868cdb073cb8856dae' (2026-04-29)

Sources Changelog:

nix-fast-build: 7f185e0ec37b65b4730f892e0de9a831b0610f3a → 7ed04619479cc06dafaa1fd60f7db75cdeeb2638

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

github-actions · 2026-05-09T17:44:38Z

Profile diff:

warning: unknown experimental feature 'pipe-operators'
awww: 0.12.0 → 0.12.1, +46.1 KiB
b2pkn24pnslzwxa43krgypp1wz66ds8i: ∅ → ε, +388.7 KiB
btop: 1.4.6 → 1.4.7, +61.3 KiB
deno: 2.7.13 → 2.7.14, +452.8 KiB
gmp: 6.3.0 → ∅, -722.5 KiB
hm_.vscodeextensions.extensionsimmutable.json: ∅ → ε
hm_.vscodeossextensions.extensionsimmutable.json: ε → ∅
hyprtoolkit: 0.5.3 → 0.5.4, +55.6 KiB
hyprutils: 0.12.0 → 0.13.0, +16.3 KiB
isl: 0.20 → ∅, -2576.5 KiB
libXNVCtrl: 595.58.03 → 595.71.05
librewolf: 150.0-1 → 150.0.1-1
librewolf-unwrapped: 150.0-1 → 150.0.1-1, -413.4 KiB
lix: 2.94.1 → 2.94.2, +11.4 KiB
mesa: 26.0.5 → 26.0.6
nix: 2.34.6 → 2.34.7, +9.1 KiB
nix-cmd: 2.30.4+1, 2.34.6 → 2.30.5+1, 2.34.7
nix-expr: 2.30.4+1, 2.34.6 → 2.30.5+1, 2.34.7
nix-fetchers: 2.30.4+1, 2.34.6 → 2.30.5+1, 2.34.7
nix-flake: 2.30.4+1, 2.34.6 → 2.30.5+1, 2.34.7
nix-index: 0.1.9-unstable-2026-04-20 → 0.1.10, -29.7 KiB
nix-index-with-full-db: 0.1.9-unstable-2026-04-20 → 0.1.10
nix-main: 2.30.4+1, 2.34.6 → 2.30.5+1, 2.34.7
nix-nswrapper: 2.34.6 → 2.34.7
nix-store: 2.30.4+1, 2.31.4, 2.34.6 → 2.30.5+1, 2.31.5, 2.34.7
nix-util: 2.30.4+1, 2.31.4, 2.34.6 → 2.30.5+1, 2.31.5, 2.34.7, +30.5 KiB
nixos: 26.05.20260430.15f4ee4 → 26.05.20260505.549bd84, +584.1 KiB
nixos-system-lenovo-laptop: 26.05.20260430.15f4ee4 → 26.05.20260505.549bd84
nixos-system-rescue: 26.05.20260430.15f4ee4 → 26.05.20260505.549bd84
openjdk-headless-minimal-jre: 21.0.10+7 → ∅, -91130.1 KiB
openjdk-minimal-jre: ∅ → 21.0.10+7, +91649.3 KiB
python3.13-identify: 2.6.18 → 2.6.19
python3.13-sentry-sdk: 2.58.0 → 2.59.0, +116.7 KiB
rclone: 1.73.5 → 1.74.0, +1933.1 KiB
s31cgv7p8fnkm6d8zf7nv964wgzkp6wb: ε → ∅, -388.7 KiB
sd-switch: 0.6.2 → 0.6.3, +15.1 KiB
starship: 1.25.0 → 1.25.1, +8.5 KiB
thunderbird: 150.0 → 150.0.1
thunderbird-unwrapped: 150.0 → 150.0.1, +129.8 KiB
vscode-extension-catppuccin-catppuccin-vsc: 3.18.1 → 3.19.0, +28.0 KiB

Vulnerabilities in closure:
130 derivations with active advisories

Diff-1.0.2

/nix/store/r4vqq3r43zb14ji6wsfaa3wj97qc1r22-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1

ShellCheck-0.11.0

/nix/store/ll3afsqfbalx77jgvg6s6491ivpq2ihp-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

accountsservice-23.13.9

/nix/store/x7hs4gprwfmf744dgvcbj7h4adsvf821-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 8.1

ada-3.4.4

/nix/store/x3ic9hcmdl2y4w1k78z9w6ry8214h62b-ada-3.4.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3

async-2.2.6

/nix/store/kdbiwsi2yh0kxrn45bfsd84q57620f5q-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8

avahi-0.8

/nix/store/qj7g11iyh5mvar82vqpr4piyzbp65435-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68471 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-24401 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68276 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-34933 5.5

binutils-2.44

binutils-2.46

/nix/store/h49a9wag39v22lciqxy7839mvz3qvvls-binutils-2.46.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-69649 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69650 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69652 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69651 5.5

bolt-0.9.8

/nix/store/2z505z1asyhbhgc3j6k4rxib8l36g1ph-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5

busybox-1.37.0

/nix/store/fkva40d576l092p8whhacfr9gjnbf7jw-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-60876 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2

bytes-1.11.0

/nix/store/jwq7bhjhw9wd5wlzc224qksy55vsz1c7-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5

capstone-5.0.7

/nix/store/0y82c4abl4i24h0j7qhw020iibb0cl5w-capstone-5.0.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8

cargo-1.90.0-x86_64-unknown-linux-gnu

/nix/store/92r8s2sksf25lfhp6dc44z9afcbms0ka-cargo-1.90.0-x86_64-unknown-linux-gnu.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4

cargo-1.94.1

/nix/store/kmmplvnz8rxg8x1h7mc13f5pz3mrsw3v-cargo-1.94.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4

commonmark-0.2.6.1

/nix/store/m7a5wrm9n4if64ihx2vjdvi5rg1nqjj3-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1

cryptography-46.0.6-vendor

/nix/store/rkzbqxc6xpnlqaa4waanvh6fgws0fcli-cryptography-46.0.6-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39892 9.8

cryptography-46.0.6-vendor-staging

/nix/store/zyy6wrpfw9nlawyg0d09r0v9q8pr58bc-cryptography-46.0.6-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39892 9.8

cups-2.4.16

curl-0.4.49

dash-0.5.13.2

/nix/store/a8liv1rn8a4k82k3gfxiq9731l614agy-dash-0.5.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5

dbus-0.9.10

/nix/store/ccdhbzd787rv1lg05mhpgc34bcczsaja-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/x5xs6m8k0ddpiqjily95fw07871m8yvy-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

exiv2-0.28.8

/nix/store/c3znb6apk0fpgrppbagrfs1f10wghskp-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3

ffmpeg-7.1.3

ffmpeg-8.0.1

filelock-0.1.1.9

/nix/store/qmq3ryb5nr0xr261cygslrgcqbgj93wp-filelock-0.1.1.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3

firefox-150.0.1

/nix/store/cljlkpzqikvvi2m8vvskm5j2vx0a1542-firefox-150.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-8090 7.3

fontforge-20251009

/nix/store/pn4crb4z4swlrnsgarapi1yykklkawpj-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

fontforge-20251009

/nix/store/rdfmfg4giy9vzx2aby4zvdxbgksk0lqp-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

freerdp-3.24.2

/nix/store/kbh1m7gb6wr41wz6aizd28zrkghbw5iv-freerdp-3.24.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-40254 4.2

gcc-4.6.4

/nix/store/1xi2ynqfjwj4kzbqkxvp2pbb47nrj2p7-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-10.4.0

/nix/store/6mqahlwr5wxgjixr8cwxzghybg62gx52-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-14.3.0

/nix/store/7i0f5gfas6iija8i31l7b2bdjpiv779i-gcc-14.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/xkqq5nfq64z3i6pj00h41sawblr1yns9-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/4v7xi5lfcawbj38zqmdj7ylbx4h2xyh2-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

giflib-5.2.2

/nix/store/scjnpnzk0sv4nnzdcwsnpnqq3aciawfd-giflib-5.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26740 8.2
https://nvd.nist.gov/vuln/detail/CVE-2024-45993 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-23868 5.1

git-2.53.0

/nix/store/gz2q1wq6ckyphg0q08nq9q93g1a6x561-git-2.53.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66413 7.4
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3

glibc-2.40-66

glibc-2.42

glibc-2.42-61

/nix/store/r539m16q2dfam1cazdgqn3f8ch6dl6w6-glibc-2.42-61.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42-61-source-unsecvars

/nix/store/s202i4bhqpac60imnvbwc259sjy72v9p-glibc-2.42-61-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

go-1.24.13-linux-amd64-bootstrap

go-1.24.13-linux-386-bootstrap

go-1.26.2

/nix/store/5a501r66jxszbpw9af1q1a5z3rnrcmfs-go-1.26.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

gstreamer-1.26.11

gzip-1.2.4

/nix/store/myyqbqqd8ky9k4czrqhwlcnkw5mnlg3v-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8

hedgehog-1.5

/nix/store/jfyqjkpd9s4wxw5qcn21nqmws4ajv17f-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

hedgehog-1.5-r2.cabal

/nix/store/bx3k3m7rsr6hvsk7xqpafdcdyrf7s67h-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

inetutils-2.7

/nix/store/rd26xa7j9rbl96pbp4khh4aqkyv6la4j-inetutils-2.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32772 3.4

jam-2.6.1

/nix/store/a65v12n21hgcg60idfp02l141d8cyqrv-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jam-2.6.1.tar

/nix/store/5r2czhqjhpxhirakg8n8anqi4y9z2isq-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jbig2dec-0.20

/nix/store/x9ahbqggrmvmskibrml5xqiiv00jf81q-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

jose-0.11

/nix/store/fqhvpjjmifia8rm0fh5z853icnw3w9wb-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9

jq-1.8.1

/nix/store/b7xrk5idxkza33wiaizqzs9fqzvw5lqb-jq-1.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32316 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33947 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3

jq-1.8.1

/nix/store/wdskdcvg3n146wp626vpzxw9wh3c07rg-jq-1.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32316 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33947 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3

jq-1.8.1-binlore

/nix/store/qs9il3kw75z712zklcl1nfl23hd0i4dd-jq-1.8.1-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3

kcoreaddons-5.116.0

/nix/store/9r4him8frfas0d1rmmfacdiw3jjsbi98-kcoreaddons-5.116.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41526 6.5

lapack-3

/nix/store/zhar788xkvfn6z3ps40c6lv9kix1z5li-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libexif-0.6.25

/nix/store/2ksgzkynh6h7gp0f4xykblr7fw463x0q-libexif-0.6.25.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32775 7.4
https://nvd.nist.gov/vuln/detail/CVE-2026-40385 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-40386 4.0

libgcrypt-1.11.2

/nix/store/y0w54m2s46nq5lxq2lm2cmy5lnhghcd2-libgcrypt-1.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41989 6.7

libinput-1.29.2

/nix/store/ls5hz61xh0kbl5bygidkfy4vmhphm0a4-libinput-1.29.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-35093 8.8

libmemcached-1.0.18

/nix/store/2mwnc6ma835zw8js8ffq0vvxk94yxsf9-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmicrohttpd-1.0.2

/nix/store/yqrkzd6i743lf0i1i4y0vg70h3ivbpdi-libmicrohttpd-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5

libmpeg2-0.5.1

/nix/store/r3lirr4kmdzc81nif4q34ns108sr1cls-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libpng-1.2.59

/nix/store/cjp1c9rqz7bbh5arh5ch4dy1hq6mhasc-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1

libraw-0.22.0

/nix/store/b1zp8gl991gam1v7xh9rrzb1i33xl5l1-libraw-0.22.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-20889 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-20911 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-21413 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-24660 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-5342 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-5318 4.3

libsndfile-1.2.2

/nix/store/7qn20df24p9a7fx5vzhwpd6c7xr9g7w8-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-37555 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3

libssh2-1.11.1

/nix/store/6nhdv0phm3h7y0r1sjy20hvn6fcqlqr9-libssh2-1.11.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-7598 7.3

lua-5.2.4

/nix/store/zq02h607zryv87k20drc1cd5gp8364ax-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

lua-5.2.4-env

/nix/store/88ph5ayhcirinjq1iim1pma0gy2hh0dd-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

malcontent-0.13.1

/nix/store/dlyqsp3hd3qsck8d1llcyalxs0pn09yh-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3

memcached-1.6.41

/nix/store/yrx4cwwvikhs7958qfvbacyl0x0rw31v-memcached-1.6.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8

mercurial-7.1.2

/nix/store/ssrf5i9272bbvlimn0zfi5x16nfnh9jv-mercurial-7.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor

/nix/store/6w5m14zv8iq766ykaz8cmszdhybh43p6-mercurial-7.1.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor-staging

/nix/store/n27z6skwig0625l0fzy662x6jfc3j6f6-mercurial-7.1.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

nemo-6.6.4

/nix/store/3030sns429amjqv49bscr76zry9ip4v9-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1

network-3.2.8.0

ninja-1.13.2

/nix/store/8zcxifany2k5ndz3k167a5akzhh93qv7-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5

nix-0.29.0

/nix/store/79w1lcacc2k45xig9q3zknvvgdcv4wfy-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

nix-0.31.1

/nix/store/gl5zaflbl8lm7y8kiiriapy2084sw5wv-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

openexr-3.3.8

openssl-3.6.1

/nix/store/0xzww08r9rgw31nnh34kzbwj9d4gxrbk-openssl-3.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-31789 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-28387 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-28386 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28388 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28389 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28390 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31790 7.5

openvswitch-3.7.1

/nix/store/m2qxb9m3hb5h2i5h8s5gjx0h3yszy9wg-openvswitch-3.7.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1

orc-0.4.41

/nix/store/vkrsl22bjnabsl3079czvbxk6bg883lf-orc-0.4.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8

perl-5.40.0

/nix/store/vif7qliqzlzmccf90d0412dkgnq523c5-perl-5.40.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0

/nix/store/0ydjk9mjp4g0v8yq3nl1d4c7f49c3pdn-perl-5.42.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0-binlore

/nix/store/lkir2dn7230jnszbvcrhxylx1ag3rsb6-perl-5.42.0-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0-env

/nix/store/m7qzsjqw3j6s0iq22cgfhallw02ziamy-perl-5.42.0-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

php-calendar-8.4.20

/nix/store/n9fdjgb6qnwfxav1qlg2ws53s9957zby-php-calendar-8.4.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5

pip-20.3.4-source

/nix/store/5pyxs7z8qjifq85wrby0f55ymzih3vq1-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5

pods-2.3.0

pods-2.3.0-vendor

pods-2.3.0-vendor-staging

polkit-1.pam

/nix/store/gf6irj3ss7r47djgd1aapkbglhca7yr2-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.12

python-3.14.2

/nix/store/yr8jdsv7xy6k3hnjhvqa9sm6n987k1sf-python-3.14.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-4519 3.3

rubygems-3.7.2

/nix/store/b7f1aw9my22s9ii0v13mrlw7ldd9y0a7-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3

safe-0.3.21

safe-0.3.21-r1.cabal

sassc-3.6.2

/nix/store/7p2g5jj8c448k0nckvaxdm96m95kqyy3-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

setuptools-44.0.0-source

/nix/store/ss5ifyrx3c5ck5jswrynscqs8wc4c002-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

shellcheck-0.11.0

/nix/store/4mn0nhhr5xpdy6qd3fpd8c0xrwamibp9-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

snappy-1.2.2

/nix/store/351rfian65nm4v4fyw1dfrsmk3cc63ky-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

stringbuilder-0.5.1

/nix/store/lysawwiyibl967jh2v87hhs2pk3j1xzv-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2

subversion-1.14.5

/nix/store/w8ip17c0bpcj7z15d9rdvny5vzpz6hzj-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3

systemd-2.4.0

/nix/store/b6c74v1qsygghqjv64mggnxq2yny52xa-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-40225 6.4
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7

taglib-1.13.1

/nix/store/h3r97izlfq453c1ymrismhfa4hl52i4d-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9

tap-1.0.1

/nix/store/987ps5krzldnwgymviq1nzaqh1q40rww-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

tar-0.6.4.0

tar-0.6.4.0-r4.cabal

thunderbird-150.0.1

/nix/store/mgcj972nafn321gqmi3q4za7xj2fagzf-thunderbird-150.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-8090 7.3

vault-0.3.1.6

vim-9.2.0340

/nix/store/zvx0lzr62xi37a49dd1pwb9hcw4jy5sl-vim-9.2.0340.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41411 6.6

warp-3.4.9

websockets-0.13.0.0

/nix/store/wbiy8d9bfywlx3g8hmhd8fc59hp1iv6f-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

websockets-0.13.0.0-r5.cabal

/nix/store/p95nbjw68cm9mcb5dkppaav8wmwlr9dq-websockets-0.13.0.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

wheel-0.37.1-source

/nix/store/81cbyxkgaiqac14kn6vhnp6yf2vxfvz3-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

word-wrap-0.5

/nix/store/9r7xq2rvzsl6ac1k6p25av7584pn1573-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3

xdg-dbus-proxy-0.1.6

/nix/store/vhhdrxmj96b0v9qk7ccn4682s80pj25h-xdg-dbus-proxy-0.1.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34080 5.5

xz-5.4.7

/nix/store/qgyzbksqicaw5fda7v490g5m57bzh76m-xz-5.4.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

xz-5.8.1

/nix/store/c93ng76ibm84gip7ivblv7fm17yav91f-xz-5.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

xz-5.8.2

/nix/store/gybip82sxvarqinbp7wx1ps22n9hgbnf-xz-5.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

yaml-0.11.11.2

/nix/store/vqqzhc50yw43p2kw94b4nhacpbfxwd6h-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/5xmarhf49qi0g08ya827hac31whpxsm6-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yarn-1.22.22

/nix/store/rbbvzwlda6r56jhwsy8arvnq1clz5chz-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3

yasm-1.3.0

yoke-0.8.1

/nix/store/502k6kibb643fmp77ncv0322mnda3rim-yoke-0.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26056 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-26055 7.5

zlib-0.7.1.1

/nix/store/qwni87k17z7w9kqp61wya25425r2q4c8-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

zlib-1.3.1

/nix/store/y66rcdz3rdwrdxl0b3vjsllgvpwxqpcs-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9

zlib-1.3.2

/nix/store/rqz8g3rdk0jgy78v7dbf1jgr71if4wzp-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

Signed-off-by: Reputable2722 <153411261+Reputable2772@users.noreply.github.com>

github-actions · 2026-05-12T16:02:24Z

Profile diff:

warning: unknown experimental feature 'pipe-operators'
apache-httpd: 2.4.66 → 2.4.67
ark: 26.04.0 → 26.04.1
attica: 6.25.0 → 6.26.0
awww: 0.12.0 → 0.12.1, +46.1 KiB
breeze-icons: 6.25.0 → 6.26.0
btop: 1.4.6 → 1.4.7, +61.3 KiB
cachix: 1.11.0 → 1.11.1, +33.5 KiB
deno: 2.7.13 → 2.7.14, +452.8 KiB
firefox: 150.0.1 → 150.0.2, +27.6 KiB
firefox-unwrapped: 150.0.1 → 150.0.2, +169.2 KiB
frameworkintegration: 6.25.0 → 6.26.0
freerdp: 3.24.2 → 3.26.0, +41.2 KiB
gmp: 6.3.0 → ∅, -722.5 KiB
hyperv-daemons: 7.0.3 → 7.0.5
hyperv-daemons-bin: 7.0.3 → 7.0.5
hyprpicker: 0.4.6 → 0.4.7
hyprtoolkit: 0.5.3 → 0.5.4, +55.6 KiB
hyprutils: 0.12.0 → 0.13.1, +29.0 KiB
initrd-linux: 7.0.3 → 7.0.5, -78.9 KiB
isl: 0.20 → ∅, -2576.5 KiB
karchive: 6.25.0 → 6.26.0
kauth: 6.25.0 → 6.26.0
kbookmarks: 6.25.0 → 6.26.0
kcmutils: 6.25.0 → 6.26.0
kcodecs: 6.25.0 → 6.26.0
kcolorscheme: 6.25.0 → 6.26.0
kcompletion: 6.25.0 → 6.26.0
kconfig: 6.25.0 → 6.26.0
kconfigwidgets: 6.25.0 → 6.26.0
kcontacts: 6.25.0 → 6.26.0
kcoreaddons: 6.25.0 → 6.26.0, +87.5 KiB
kcrash: 6.25.0 → 6.26.0
kdbusaddons: 6.25.0 → 6.26.0
kdeconnect-kde: 26.04.0 → 26.04.1
kdegraphics-mobipocket: 26.04.0 → 26.04.1
kdialog: 26.04.0 → 26.04.1
kdoctools: 6.25.0 → 6.26.0
kfilemetadata: 6.25.0 → 6.26.0
kglobalaccel: 6.25.0 → 6.26.0
kguiaddons: 6.25.0 → 6.26.0
ki18n: 6.25.0 → 6.26.0
kiconthemes: 6.25.0 → 6.26.0
kio: 6.25.0 → 6.26.0, -15.8 KiB
kirigami: 6.25.0 → 6.26.0, +1134.6 KiB
kitemmodels: 6.25.0 → 6.26.0
kitemviews: 6.25.0 → 6.26.0
kjobwidgets: 6.25.0 → 6.26.0
knewstuff: 6.25.0 → 6.26.0
knotifications: 6.25.0 → 6.26.0
kpackage: 6.25.0 → 6.26.0
kparts: 6.25.0 → 6.26.0
kpeople: 6.25.0 → 6.26.0
kpty: 6.25.0 → 6.26.0
kservice: 6.25.0 → 6.26.0
kstatusnotifieritem: 6.25.0 → 6.26.0
ktextwidgets: 6.25.0 → 6.26.0
kwallet: 6.25.0 → 6.26.0
kwidgetsaddons: 6.25.0 → 6.26.0
kwindowsystem: 6.25.0 → 6.26.0
kxmlgui: 6.25.0 → 6.26.0
libXNVCtrl: 595.58.03 → 595.71.05
libinput: 1.29.2 → 1.31.1, +45.2 KiB
libphonenumber: 9.0.29 → 9.0.30, +225.4 KiB
libplacebo: 7.351.0 → 7.360.1, +41.0 KiB
librewolf: 150.0-1 → 150.0.2-1
librewolf-unwrapped: 150.0-1 → 150.0.2-1, -161.2 KiB
linux: 7.0.3 → 7.0.5, -134.1 KiB
lix: 2.94.1 → 2.94.2, +11.4 KiB
mangohud: 0.8.2 → 0.8.3, +5650.7 KiB
mesa: 26.0.5 → 26.1.0, +24619.7 KiB
modemmanager-qt: 6.25.0 → 6.26.0
nbd: 3.25 → 3.27.1, +15.4 KiB
nix: 2.34.6 → 2.34.7, +9.1 KiB
nix-cmd: 2.30.4+1, 2.34.6 → 2.34.7, -967.4 KiB
nix-expr: 2.30.4+1, 2.34.6 → 2.34.7, -2836.2 KiB
nix-fetchers: 2.30.4+1, 2.34.6 → 2.34.7, -1372.2 KiB
nix-flake: 2.30.4+1, 2.34.6 → 2.34.7, -939.0 KiB
nix-index: 0.1.9-unstable-2026-04-20 → 0.1.10, -29.7 KiB
nix-index-with-full-db: 0.1.9-unstable-2026-04-20 → 0.1.10
nix-main: 2.30.4+1, 2.34.6 → 2.34.7, -370.5 KiB
nix-nswrapper: 2.34.6 → 2.34.7
nix-store: 2.30.4+1, 2.31.4, 2.34.6 → 2.31.5, 2.34.7, -4910.7 KiB
nix-util: 2.30.4+1, 2.31.4, 2.34.6 → 2.31.5, 2.34.7, -1917.1 KiB
nixd: 2.9.0 → 2.9.1, +28.8 KiB
nixf: 2.9.0 → 2.9.1
nixos: 26.05.20260430.15f4ee4 → 26.05.20260510.da5ad66, +1069.7 KiB
nixos-system-lenovo-laptop: 26.05.20260430.15f4ee4 → 26.05.20260510.da5ad66
nixos-system-rescue: 26.05.20260430.15f4ee4 → 26.05.20260510.da5ad66
nixt: 2.9.0 → 2.9.1
nj4c2nr8scmizbgb8b6aqsixgw1wf922: ε → ∅, -388.9 KiB
openjdk-headless-minimal-jre: 21.0.10+7 → ∅, -91130.1 KiB
openjdk-minimal-jre: ∅ → 21.0.10+7, +91649.3 KiB
python3.13-dbus-fast: 4.0.0 → 4.0.4
python3.13-identify: 2.6.18 → 2.6.19
python3.13-sentry-sdk: 2.58.0 → 2.59.0, +116.7 KiB
qbittorrent: 5.1.4 → 5.2.0, +818.3 KiB
qqc2-desktop-style: 6.25.0 → 6.26.0
qtstyleplugin-kvantum: 1.1.6 → 1.1.7, +87.6 KiB
qtstyleplugin-kvantum5: 1.1.6 → 1.1.7
rclone: 1.73.5 → 1.74.0, +1933.1 KiB
sd-switch: 0.6.2 → 0.6.3, +15.1 KiB
solid: 6.25.0 → 6.26.0, +220.8 KiB
sonnet: 6.25.0 → 6.26.0
starship: 1.25.0 → 1.25.1, +8.5 KiB
syndication: 6.25.0 → 6.26.0
thunderbird: 150.0 → 150.0.1
thunderbird-unwrapped: 150.0 → 150.0.1, +129.8 KiB
turbostat: 7.0.3 → 7.0.5
uriparser: 1.0.1 → 1.0.2
vscode-extension-catppuccin-catppuccin-vsc: 3.18.1 → 3.19.0, +28.0 KiB
vscode-extension-rust-lang-rust-analyzer: 0.3.2878 → 0.3.2896, +973.8 KiB
x86_energy_perf_policy: 6.18.26 → 6.18.28
xen: 4.20.2 → 4.20.3
z3pnbxs9z35iqrmiz9ilds94cssds1jv: ∅ → ε, +388.9 KiB

Vulnerabilities in closure:
130 derivations with active advisories

Diff-1.0.2

/nix/store/r4vqq3r43zb14ji6wsfaa3wj97qc1r22-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1

ShellCheck-0.11.0

/nix/store/ll3afsqfbalx77jgvg6s6491ivpq2ihp-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

accountsservice-23.13.9

/nix/store/x7hs4gprwfmf744dgvcbj7h4adsvf821-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 8.1

ada-3.4.4

/nix/store/x3ic9hcmdl2y4w1k78z9w6ry8214h62b-ada-3.4.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3

async-2.2.6

/nix/store/kdbiwsi2yh0kxrn45bfsd84q57620f5q-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8

avahi-0.8

/nix/store/qj7g11iyh5mvar82vqpr4piyzbp65435-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68471 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-24401 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68276 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-34933 5.5

binutils-2.44

binutils-2.46

/nix/store/h49a9wag39v22lciqxy7839mvz3qvvls-binutils-2.46.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-69649 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69650 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69652 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69651 5.5

bolt-0.9.8

/nix/store/2z505z1asyhbhgc3j6k4rxib8l36g1ph-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5

busybox-1.37.0

/nix/store/fkva40d576l092p8whhacfr9gjnbf7jw-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-60876 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2

bytes-1.11.0

/nix/store/jwq7bhjhw9wd5wlzc224qksy55vsz1c7-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5

capstone-5.0.7

/nix/store/0y82c4abl4i24h0j7qhw020iibb0cl5w-capstone-5.0.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8

cargo-1.90.0-x86_64-unknown-linux-gnu

/nix/store/92r8s2sksf25lfhp6dc44z9afcbms0ka-cargo-1.90.0-x86_64-unknown-linux-gnu.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4

cargo-1.94.1

/nix/store/kmmplvnz8rxg8x1h7mc13f5pz3mrsw3v-cargo-1.94.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4

commonmark-0.2.6.1

/nix/store/m7a5wrm9n4if64ihx2vjdvi5rg1nqjj3-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1

cryptography-46.0.6-vendor

/nix/store/rkzbqxc6xpnlqaa4waanvh6fgws0fcli-cryptography-46.0.6-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39892 9.8

cryptography-46.0.6-vendor-staging

/nix/store/zyy6wrpfw9nlawyg0d09r0v9q8pr58bc-cryptography-46.0.6-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39892 9.8

cups-2.4.16

curl-0.4.49

dash-0.5.13.2

/nix/store/a8liv1rn8a4k82k3gfxiq9731l614agy-dash-0.5.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5

dbus-0.9.10

/nix/store/ccdhbzd787rv1lg05mhpgc34bcczsaja-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/x5xs6m8k0ddpiqjily95fw07871m8yvy-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

exiv2-0.28.8

/nix/store/c3znb6apk0fpgrppbagrfs1f10wghskp-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3

ffmpeg-7.1.3

ffmpeg-8.0.1

filelock-0.1.1.9

/nix/store/qmq3ryb5nr0xr261cygslrgcqbgj93wp-filelock-0.1.1.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3

fontforge-20251009

/nix/store/pn4crb4z4swlrnsgarapi1yykklkawpj-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

fontforge-20251009

/nix/store/rdfmfg4giy9vzx2aby4zvdxbgksk0lqp-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

gcc-4.6.4

/nix/store/1xi2ynqfjwj4kzbqkxvp2pbb47nrj2p7-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-10.4.0

/nix/store/6mqahlwr5wxgjixr8cwxzghybg62gx52-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-14.3.0

/nix/store/7i0f5gfas6iija8i31l7b2bdjpiv779i-gcc-14.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/xkqq5nfq64z3i6pj00h41sawblr1yns9-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/4v7xi5lfcawbj38zqmdj7ylbx4h2xyh2-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

giflib-5.2.2

/nix/store/scjnpnzk0sv4nnzdcwsnpnqq3aciawfd-giflib-5.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26740 8.2
https://nvd.nist.gov/vuln/detail/CVE-2024-45993 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-23868 5.1

git-2.53.0

/nix/store/gz2q1wq6ckyphg0q08nq9q93g1a6x561-git-2.53.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66413 7.4
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3

glibc-2.40-66

glibc-2.42

glibc-2.42-61

/nix/store/r539m16q2dfam1cazdgqn3f8ch6dl6w6-glibc-2.42-61.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42-61-source-unsecvars

/nix/store/s202i4bhqpac60imnvbwc259sjy72v9p-glibc-2.42-61-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

go-1.24.13-linux-amd64-bootstrap

go-1.24.13-linux-386-bootstrap

go-1.26.2

/nix/store/5a501r66jxszbpw9af1q1a5z3rnrcmfs-go-1.26.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

gstreamer-1.26.11

gzip-1.2.4

/nix/store/myyqbqqd8ky9k4czrqhwlcnkw5mnlg3v-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8

hedgehog-1.5

/nix/store/jfyqjkpd9s4wxw5qcn21nqmws4ajv17f-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

hedgehog-1.5-r2.cabal

/nix/store/bx3k3m7rsr6hvsk7xqpafdcdyrf7s67h-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

inetutils-2.7

/nix/store/rd26xa7j9rbl96pbp4khh4aqkyv6la4j-inetutils-2.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32772 3.4

jam-2.6.1

/nix/store/a65v12n21hgcg60idfp02l141d8cyqrv-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jam-2.6.1.tar

/nix/store/5r2czhqjhpxhirakg8n8anqi4y9z2isq-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jbig2dec-0.20

/nix/store/x9ahbqggrmvmskibrml5xqiiv00jf81q-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

jose-0.11

/nix/store/fqhvpjjmifia8rm0fh5z853icnw3w9wb-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9

jq-1.8.1

/nix/store/b7xrk5idxkza33wiaizqzs9fqzvw5lqb-jq-1.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32316 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33947 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3

jq-1.8.1

/nix/store/wdskdcvg3n146wp626vpzxw9wh3c07rg-jq-1.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32316 8.2
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33947 6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3

jq-1.8.1-binlore

/nix/store/qs9il3kw75z712zklcl1nfl23hd0i4dd-jq-1.8.1-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3

kcoreaddons-5.116.0

/nix/store/g3c8igyqazkz5k7fsvq3w7nkyikvimmn-kcoreaddons-5.116.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41526 6.5

lapack-3

/nix/store/zhar788xkvfn6z3ps40c6lv9kix1z5li-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libexif-0.6.25

/nix/store/2ksgzkynh6h7gp0f4xykblr7fw463x0q-libexif-0.6.25.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32775 7.4
https://nvd.nist.gov/vuln/detail/CVE-2026-40385 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-40386 4.0

libgcrypt-1.11.2

/nix/store/y0w54m2s46nq5lxq2lm2cmy5lnhghcd2-libgcrypt-1.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41989 6.7

libmemcached-1.0.18

/nix/store/2mwnc6ma835zw8js8ffq0vvxk94yxsf9-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmicrohttpd-1.0.2

/nix/store/yqrkzd6i743lf0i1i4y0vg70h3ivbpdi-libmicrohttpd-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5

libmpeg2-0.5.1

/nix/store/r3lirr4kmdzc81nif4q34ns108sr1cls-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libpng-1.2.59

/nix/store/cjp1c9rqz7bbh5arh5ch4dy1hq6mhasc-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1

libraw-0.22.0

/nix/store/b1zp8gl991gam1v7xh9rrzb1i33xl5l1-libraw-0.22.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-20889 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-20911 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-21413 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-24660 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-5342 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-5318 4.3

libsndfile-1.2.2

/nix/store/7qn20df24p9a7fx5vzhwpd6c7xr9g7w8-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-37555 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3

libssh2-1.11.1

/nix/store/6nhdv0phm3h7y0r1sjy20hvn6fcqlqr9-libssh2-1.11.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-7598 7.3

lua-5.2.4

/nix/store/zq02h607zryv87k20drc1cd5gp8364ax-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

lua-5.2.4-env

/nix/store/88ph5ayhcirinjq1iim1pma0gy2hh0dd-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

malcontent-0.13.1

/nix/store/dlyqsp3hd3qsck8d1llcyalxs0pn09yh-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3

memcached-1.6.41

/nix/store/yrx4cwwvikhs7958qfvbacyl0x0rw31v-memcached-1.6.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8

mercurial-7.1.2

/nix/store/ssrf5i9272bbvlimn0zfi5x16nfnh9jv-mercurial-7.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor

/nix/store/6w5m14zv8iq766ykaz8cmszdhybh43p6-mercurial-7.1.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor-staging

/nix/store/n27z6skwig0625l0fzy662x6jfc3j6f6-mercurial-7.1.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

nemo-6.6.4

/nix/store/1cqg5wzmck8fv20jik3wgq2qhqcyr1a0-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1

network-3.2.8.0

ninja-1.13.2

/nix/store/8zcxifany2k5ndz3k167a5akzhh93qv7-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5

nix-0.29.0

/nix/store/79w1lcacc2k45xig9q3zknvvgdcv4wfy-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

nix-0.31.1

/nix/store/gl5zaflbl8lm7y8kiiriapy2084sw5wv-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

openexr-3.3.8

openssl-3.6.1

/nix/store/0xzww08r9rgw31nnh34kzbwj9d4gxrbk-openssl-3.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-31789 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-28387 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-28386 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28388 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28389 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28390 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31790 7.5

openvswitch-3.7.1

/nix/store/m2qxb9m3hb5h2i5h8s5gjx0h3yszy9wg-openvswitch-3.7.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1

orc-0.4.41

/nix/store/vkrsl22bjnabsl3079czvbxk6bg883lf-orc-0.4.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8

perl-5.40.0

/nix/store/vif7qliqzlzmccf90d0412dkgnq523c5-perl-5.40.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0

/nix/store/0ydjk9mjp4g0v8yq3nl1d4c7f49c3pdn-perl-5.42.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0-binlore

/nix/store/lkir2dn7230jnszbvcrhxylx1ag3rsb6-perl-5.42.0-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0-env

/nix/store/xr1px3z21h01psivm3d7qcl3dk1ana3v-perl-5.42.0-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

php-calendar-8.4.21

/nix/store/mi9h4y5bq7m5b23p267f4q0gvybkmydv-php-calendar-8.4.21.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5

pip-20.3.4-source

/nix/store/5pyxs7z8qjifq85wrby0f55ymzih3vq1-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5

pods-2.3.0

pods-2.3.0-vendor

pods-2.3.0-vendor-staging

polkit-1.pam

/nix/store/6ykr0729dm2ic7rr1s4hkzn2pz9xy28k-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.12

python-3.14.2

/nix/store/yr8jdsv7xy6k3hnjhvqa9sm6n987k1sf-python-3.14.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-4519 3.3

rubygems-3.7.2

/nix/store/b7f1aw9my22s9ii0v13mrlw7ldd9y0a7-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3

safe-0.3.21

safe-0.3.21-r1.cabal

sassc-3.6.2

/nix/store/7p2g5jj8c448k0nckvaxdm96m95kqyy3-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

setuptools-44.0.0-source

/nix/store/ss5ifyrx3c5ck5jswrynscqs8wc4c002-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

shellcheck-0.11.0

/nix/store/4mn0nhhr5xpdy6qd3fpd8c0xrwamibp9-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

snappy-1.2.2

/nix/store/351rfian65nm4v4fyw1dfrsmk3cc63ky-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

stringbuilder-0.5.1

/nix/store/lysawwiyibl967jh2v87hhs2pk3j1xzv-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2

subversion-1.14.5

/nix/store/w8ip17c0bpcj7z15d9rdvny5vzpz6hzj-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3

systemd-2.4.0

/nix/store/b6c74v1qsygghqjv64mggnxq2yny52xa-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-40225 6.4
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7

taglib-1.13.1

/nix/store/h3r97izlfq453c1ymrismhfa4hl52i4d-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9

tap-1.0.1

/nix/store/987ps5krzldnwgymviq1nzaqh1q40rww-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

tar-0.6.4.0

tar-0.6.4.0-r4.cabal

thunderbird-150.0.1

/nix/store/71f4bj9gl3y45i9vl2f7139fvy47sqyr-thunderbird-150.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-8092 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-8093 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-8090 7.3

uuid-1.3.16

/nix/store/r8g0cskp6vxcx47w60m54mx2898025cp-uuid-1.3.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5

uuid-1.3.16-r3.cabal

/nix/store/5z82dgfbnmzh9jw9sn9n19s15n321g8q-uuid-1.3.16-r3.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5

uuid-1.20.0

/nix/store/n5ckca3bq5x1qy4zsigh6c4pdw76ki46-uuid-1.20.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5

vault-0.3.1.6

vim-9.2.0340

/nix/store/zvx0lzr62xi37a49dd1pwb9hcw4jy5sl-vim-9.2.0340.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41411 6.6

warp-3.4.9

websockets-0.13.0.0

/nix/store/wbiy8d9bfywlx3g8hmhd8fc59hp1iv6f-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

websockets-0.13.0.0-r5.cabal

/nix/store/p95nbjw68cm9mcb5dkppaav8wmwlr9dq-websockets-0.13.0.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

wheel-0.37.1-source

/nix/store/81cbyxkgaiqac14kn6vhnp6yf2vxfvz3-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

word-wrap-0.5

/nix/store/9r7xq2rvzsl6ac1k6p25av7584pn1573-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3

xdg-dbus-proxy-0.1.6

/nix/store/vhhdrxmj96b0v9qk7ccn4682s80pj25h-xdg-dbus-proxy-0.1.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34080 5.5

xz-5.4.7

/nix/store/qgyzbksqicaw5fda7v490g5m57bzh76m-xz-5.4.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

xz-5.8.1

/nix/store/c93ng76ibm84gip7ivblv7fm17yav91f-xz-5.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

xz-5.8.2

/nix/store/gybip82sxvarqinbp7wx1ps22n9hgbnf-xz-5.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

yaml-0.11.11.2

/nix/store/vqqzhc50yw43p2kw94b4nhacpbfxwd6h-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/5xmarhf49qi0g08ya827hac31whpxsm6-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yarn-1.22.22

/nix/store/rbbvzwlda6r56jhwsy8arvnq1clz5chz-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3

yasm-1.3.0

yoke-0.8.1

/nix/store/502k6kibb643fmp77ncv0322mnda3rim-yoke-0.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26056 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-26055 7.5

zlib-0.7.1.1

/nix/store/qwni87k17z7w9kqp61wya25425r2q4c8-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

zlib-1.3.1

/nix/store/y66rcdz3rdwrdxl0b3vjsllgvpwxqpcs-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9

zlib-1.3.2

/nix/store/rqz8g3rdk0jgy78v7dbf1jgr71if4wzp-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

chore: update flake.lock & sources (2026-05-09)

f67b4c1

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

chore: update flake.lock & _sources

b4bc3b3

Signed-off-by: Reputable2722 <153411261+Reputable2772@users.noreply.github.com>

Reputable2772 merged commit dcffd64 into master May 12, 2026
1 check passed

Reputable2772 deleted the flake-update/2026-19 branch May 12, 2026 16:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update flake.lock & sources (2026-05-09)#93

chore: update flake.lock & sources (2026-05-09)#93
Reputable2772 merged 2 commits into
masterfrom
flake-update/2026-19

Reputable2772 commented May 9, 2026

Uh oh!

github-actions Bot commented May 9, 2026

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Reputable2772 commented May 9, 2026

Uh oh!

github-actions Bot commented May 9, 2026

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant