chore: update flake.lock & sources (2026-05-16) by Reputable2772 · Pull Request #94 · Reputable2772/NixOS

Reputable2772 · 2026-05-16T17:30:17Z

Automated Pull Request for Week 20

Flakes Changelog:

• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/0678d8986be1661af6bb555f3489f2fdfc31f6ff' (2026-05-05)
  → 'github:hercules-ci/flake-parts/f7c1a2d347e4c52d5fb8d10cb4d94b5884e546fb' (2026-05-13)
• Updated input 'home-manager':
    'github:nix-community/home-manager/1768d4e49860b86cb7652ee738de0e6b3050dd40' (2026-05-12)
  → 'github:nix-community/home-manager/d5ece85b6d3d6b5ab5a514b2785fb952b629bfea' (2026-05-16)
• Updated input 'nix4vscode':
    'github:nix-community/nix4vscode/d0091f2b3b8177552006367707b3d88cb4322651' (2026-05-12)
  → 'github:nix-community/nix4vscode/22183203918032416508545bf0053be7c313f686' (2026-05-16)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/da5ad661ba4e5ef59ba743f0d112cbc30e474f32' (2026-05-10)
  → 'github:NixOS/nixpkgs/d233902339c02a9c334e7e593de68855ad26c4cb' (2026-05-15)
• Updated input 'nur':
    'github:nix-community/NUR/02bac1e4ecfa398f3e3fc9469c507bb9aee6ca7f' (2026-05-12)
  → 'github:nix-community/NUR/9f6077b9dedfb6921e7ed8e539ee3bf43e753aea' (2026-05-16)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/549bd84d6279f9852cae6225e372cc67fb91a4c1' (2026-05-05)
  → 'github:nixos/nixpkgs/d233902339c02a9c334e7e593de68855ad26c4cb' (2026-05-15)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/83939d7df4c0f1b8ee88cabde112223280a48554' (2026-05-11)
  → 'github:Gerg-L/spicetify-nix/e175a8b634e06a1b0635ec3d4db2c72cdc41fd15' (2026-05-14)
• Updated input 'stylix':
    'github:danth/stylix/18ed8d270231e067fe2739998479ed5d7c659c2c' (2026-05-06)
  → 'github:danth/stylix/e8ea85b4f7dddda9603e0f1ac86cd92cee3b2819' (2026-05-14)

Sources Changelog:

No changes!

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

github-actions · 2026-05-16T17:48:24Z

Profile diff:

warning: unknown experimental feature 'pipe-operators'
SDL2_mixer: 2.8.1 → 2.8.2
breeze: 6.6.4 → 6.6.5
bullet: ∅ → 3.25, +31862.7 KiB
c-ares: ∅ → 1.34.6, +276.3 KiB
curl-impersonate: 1.5.5 → 1.5.6
dnsmasq: 2.92 → 2.92rel2
doxygen: ∅ → 1.16.1, +29991.6 KiB
efl: ∅ → 1.28.1, +80161.0 KiB
fastfetch: 2.62.1 → 2.63.1, +16.7 KiB
firefox: 150.0.2 → 150.0.3, -28.4 KiB
firefox-unwrapped: 150.0.2 → 150.0.3, +99.3 KiB
foot: 1.26.1 → 1.27.0, +9.5 KiB
fy9m19slg3i43k334505q67j3wvip82h: ∅ → ε, +389.7 KiB
gnome-icon-theme: ∅ → 3.12.0, +11441.2 KiB
gtk-engine-murrine: ∅ → 0.98.2, +309.7 KiB
hm_hyprhyprland.conf: ε → ∅
hm_hyprhyprland.lua: ∅ → ε, +9.5 KiB
humanity-icon-theme: ∅ → 0.6.16, +24432.6 KiB
hyperv-daemons: 7.0.5 → 7.0.8
hyperv-daemons-bin: 7.0.5 → 7.0.8
hyprgraphics: 0.5.0 → 0.5.1, +8.8 KiB
hyprland: 0.54.3 → 0.55.1, +3606.0 KiB
initrd-linux: 7.0.5 → 7.0.8, +185.0 KiB
j9d4byjxszp0apyrmnaxldw9qvlahblk: ε → ∅, -389.7 KiB
kdecoration: 6.6.4 → 6.6.5
libev: ∅ → 4.33, +225.9 KiB
libgit2: 1.9.2 → 1.9.3
librewolf: 150.0.2-1 → 150.0.3-1
librewolf-unwrapped: 150.0.2-1 → 150.0.3-1, +18.1 KiB
linux: 7.0.5 → 7.0.8
lsp-plugins: 1.2.27 → 1.2.29, +425.4 KiB
lua: ∅ → 5.5.0, +1508.6 KiB
mint-x-icons: ∅ → 1.7.5, +111198.2 KiB
nixos: 26.05.20260510.da5ad66 → 26.05.20260515.d233902, +206.4 KiB
nixos-system-lenovo-laptop: 26.05.20260510.da5ad66 → 26.05.20260515.d233902
nixos-system-rescue: 26.05.20260510.da5ad66 → 26.05.20260515.d233902
noto-fonts: 2026.04.01 → 2026.05.01
python3.13-libevdev: ∅ → 0.13.1, +363.0 KiB
python3.13-pyudev: ∅ → 0.24.4, +530.1 KiB
python3.13-sentry-sdk: 2.59.0 → 2.60.0, +117.5 KiB
rclone: 1.74.0 → 1.74.1, +16.9 KiB
thunderbird: 150.0.1 → 150.0.2
thunderbird-unwrapped: 150.0.1 → 150.0.2, -307.1 KiB
turbostat: 7.0.5 → 7.0.8
ubuntu-themes: ∅ → 24.04, +39825.0 KiB
unit-network.target: ∅ → ε
unit-networking-scripted.target: ∅ → ε
vscode-extension-jnoortheen-nix-ide: 0.5.5 → 0.5.9
x86_energy_perf_policy: 6.18.28 → 6.18.31
zam-plugins: 4.4 → 4.5, +6091.0 KiB
zfs-user: 2.4.1 → 2.4.2, +9.1 KiB

Vulnerabilities in closure:
133 derivations with active advisories

Diff-1.0.2

/nix/store/r4vqq3r43zb14ji6wsfaa3wj97qc1r22-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1

ShellCheck-0.11.0

/nix/store/ll3afsqfbalx77jgvg6s6491ivpq2ihp-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

accountsservice-23.13.9

/nix/store/x7hs4gprwfmf744dgvcbj7h4adsvf821-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 8.1

ada-3.4.4

/nix/store/x3ic9hcmdl2y4w1k78z9w6ry8214h62b-ada-3.4.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3

async-2.2.6

/nix/store/3qqrbalxkdb56gskjg9p3m0ji27wfl4c-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8

avahi-0.8

/nix/store/qj7g11iyh5mvar82vqpr4piyzbp65435-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68471 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-24401 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68276 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-34933 5.5

binutils-2.44

binutils-2.46

/nix/store/h49a9wag39v22lciqxy7839mvz3qvvls-binutils-2.46.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-69649 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69650 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-69652 6.2
https://nvd.nist.gov/vuln/detail/CVE-2025-69651 5.5

bolt-0.9.8

/nix/store/2z505z1asyhbhgc3j6k4rxib8l36g1ph-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5

busybox-1.37.0

/nix/store/fkva40d576l092p8whhacfr9gjnbf7jw-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-60876 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2

bytes-1.11.0

/nix/store/jwq7bhjhw9wd5wlzc224qksy55vsz1c7-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5

capstone-5.0.7

/nix/store/0y82c4abl4i24h0j7qhw020iibb0cl5w-capstone-5.0.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8

cargo-1.90.0-x86_64-unknown-linux-gnu

/nix/store/92r8s2sksf25lfhp6dc44z9afcbms0ka-cargo-1.90.0-x86_64-unknown-linux-gnu.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4

cargo-1.94.1

/nix/store/kmmplvnz8rxg8x1h7mc13f5pz3mrsw3v-cargo-1.94.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39839 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39840 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39841 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-39837 5.4

commonmark-0.2.6.1

/nix/store/m7a5wrm9n4if64ihx2vjdvi5rg1nqjj3-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1

cryptography-46.0.6-vendor

/nix/store/rkzbqxc6xpnlqaa4waanvh6fgws0fcli-cryptography-46.0.6-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39892 9.8

cryptography-46.0.6-vendor-staging

/nix/store/zyy6wrpfw9nlawyg0d09r0v9q8pr58bc-cryptography-46.0.6-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39892 9.8

cups-2.4.16

curl-0.4.49

curl-8.19.0

/nix/store/v5m1156qvxmach1kmrxg4n9k4r1mb7b0-curl-8.19.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5773 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-6276 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5545 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4873 5.9
https://nvd.nist.gov/vuln/detail/CVE-2026-6253 5.9
https://nvd.nist.gov/vuln/detail/CVE-2026-6429 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-7009 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-7168 5.3

dash-0.5.13.2

/nix/store/a8liv1rn8a4k82k3gfxiq9731l614agy-dash-0.5.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5

dbus-0.9.10

/nix/store/ccdhbzd787rv1lg05mhpgc34bcczsaja-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/1qd3yfdllnbrjgjx6ga6zbmlxz3r58ry-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

exiv2-0.28.8

/nix/store/c3znb6apk0fpgrppbagrfs1f10wghskp-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3

ffmpeg-7.1.3

ffmpeg-8.0.1

filelock-0.1.1.9

/nix/store/qmq3ryb5nr0xr261cygslrgcqbgj93wp-filelock-0.1.1.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3

fontforge-20251009

/nix/store/pn4crb4z4swlrnsgarapi1yykklkawpj-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

fontforge-20251009

/nix/store/rdfmfg4giy9vzx2aby4zvdxbgksk0lqp-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

gcc-4.6.4

/nix/store/1xi2ynqfjwj4kzbqkxvp2pbb47nrj2p7-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-10.4.0

/nix/store/6mqahlwr5wxgjixr8cwxzghybg62gx52-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-14.3.0

/nix/store/7i0f5gfas6iija8i31l7b2bdjpiv779i-gcc-14.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/xkqq5nfq64z3i6pj00h41sawblr1yns9-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/4v7xi5lfcawbj38zqmdj7ylbx4h2xyh2-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

giflib-5.2.2

/nix/store/scjnpnzk0sv4nnzdcwsnpnqq3aciawfd-giflib-5.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26740 8.2
https://nvd.nist.gov/vuln/detail/CVE-2024-45993 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-23868 5.1

git-2.53.0

/nix/store/gz2q1wq6ckyphg0q08nq9q93g1a6x561-git-2.53.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66413 7.4
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3

glibc-2.40-66

glibc-2.42

glibc-2.42-61

/nix/store/r539m16q2dfam1cazdgqn3f8ch6dl6w6-glibc-2.42-61.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

glibc-2.42-61-source-unsecvars

/nix/store/s202i4bhqpac60imnvbwc259sjy72v9p-glibc-2.42-61-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-5450 9.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4046 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4437 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 7.3
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4438 5.4

go-1.24.13-linux-amd64-bootstrap

go-1.24.13-linux-386-bootstrap

go-1.26.2

gstreamer-1.26.11

gzip-1.2.4

/nix/store/myyqbqqd8ky9k4czrqhwlcnkw5mnlg3v-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8

hedgehog-1.5

/nix/store/jfyqjkpd9s4wxw5qcn21nqmws4ajv17f-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

hedgehog-1.5-r2.cabal

/nix/store/bx3k3m7rsr6hvsk7xqpafdcdyrf7s67h-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

imagemagick-7.1.2-19

/nix/store/dkpz2fsmrf98gdcgiqv2yym6ydy9bkiw-imagemagick-7.1.2-19.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-42050 5.5

inetutils-2.7

/nix/store/rd26xa7j9rbl96pbp4khh4aqkyv6la4j-inetutils-2.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32772 3.4

jam-2.6.1

/nix/store/a65v12n21hgcg60idfp02l141d8cyqrv-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jam-2.6.1.tar

/nix/store/5r2czhqjhpxhirakg8n8anqi4y9z2isq-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jbig2dec-0.20

/nix/store/x9ahbqggrmvmskibrml5xqiiv00jf81q-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

jose-0.11

/nix/store/fqhvpjjmifia8rm0fh5z853icnw3w9wb-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9

jq-1.8.1

jq-1.8.1

jq-1.8.1-binlore

/nix/store/qs9il3kw75z712zklcl1nfl23hd0i4dd-jq-1.8.1-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-39979 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-44777 5.5
https://nvd.nist.gov/vuln/detail/CVE-2026-33948 5.3

kcoreaddons-5.116.0

/nix/store/g3c8igyqazkz5k7fsvq3w7nkyikvimmn-kcoreaddons-5.116.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41526 6.5

lapack-3

/nix/store/zhar788xkvfn6z3ps40c6lv9kix1z5li-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libexif-0.6.25

/nix/store/2ksgzkynh6h7gp0f4xykblr7fw463x0q-libexif-0.6.25.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-32775 7.4
https://nvd.nist.gov/vuln/detail/CVE-2026-40385 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-40386 4.0

libgcrypt-1.11.2

/nix/store/y0w54m2s46nq5lxq2lm2cmy5lnhghcd2-libgcrypt-1.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41989 6.7

libmemcached-1.0.18

/nix/store/2mwnc6ma835zw8js8ffq0vvxk94yxsf9-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmicrohttpd-1.0.2

/nix/store/yqrkzd6i743lf0i1i4y0vg70h3ivbpdi-libmicrohttpd-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5

libmpeg2-0.5.1

/nix/store/r3lirr4kmdzc81nif4q34ns108sr1cls-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libpng-1.2.59

/nix/store/cjp1c9rqz7bbh5arh5ch4dy1hq6mhasc-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-33416 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1
https://nvd.nist.gov/vuln/detail/CVE-2026-34757 5.1

libpng-1.6.56

/nix/store/vy03dhc7rp974yyjaj9xsdz4asiz248n-libpng-1.6.56.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34757 5.1

libraw-0.22.0

/nix/store/b1zp8gl991gam1v7xh9rrzb1i33xl5l1-libraw-0.22.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-20889 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-20911 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-21413 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-24660 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-5342 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-5318 4.3

libsndfile-1.2.2

/nix/store/7qn20df24p9a7fx5vzhwpd6c7xr9g7w8-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-37555 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3

libssh2-1.11.1

/nix/store/6nhdv0phm3h7y0r1sjy20hvn6fcqlqr9-libssh2-1.11.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-7598 7.3

libxml2-2.15.1

/nix/store/sfwpxx5fkl3qg34mpmnkvm9jp1jdbl2z-libxml2-2.15.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-6732 6.5

lua-5.2.4

/nix/store/zq02h607zryv87k20drc1cd5gp8364ax-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

lua-5.2.4-env

/nix/store/88ph5ayhcirinjq1iim1pma0gy2hh0dd-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

malcontent-0.13.1

/nix/store/dlyqsp3hd3qsck8d1llcyalxs0pn09yh-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3

memcached-1.6.41

/nix/store/yrx4cwwvikhs7958qfvbacyl0x0rw31v-memcached-1.6.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8

mercurial-7.1.2

/nix/store/ssrf5i9272bbvlimn0zfi5x16nfnh9jv-mercurial-7.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor

/nix/store/6w5m14zv8iq766ykaz8cmszdhybh43p6-mercurial-7.1.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor-staging

/nix/store/n27z6skwig0625l0fzy662x6jfc3j6f6-mercurial-7.1.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

nemo-6.6.4

/nix/store/k0gd65qgfk99iqkwp7afhfingyf6jlb8-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1

network-3.2.8.0

ninja-1.13.2

/nix/store/8zcxifany2k5ndz3k167a5akzhh93qv7-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5

nix-0.29.0

/nix/store/79w1lcacc2k45xig9q3zknvvgdcv4wfy-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

nix-0.31.1

/nix/store/gl5zaflbl8lm7y8kiiriapy2084sw5wv-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

openexr-3.3.8

openssl-3.6.1

/nix/store/0xzww08r9rgw31nnh34kzbwj9d4gxrbk-openssl-3.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-31789 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-28387 8.1
https://nvd.nist.gov/vuln/detail/CVE-2026-28386 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28388 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28389 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28390 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31790 7.5

openvswitch-3.7.1

/nix/store/m2qxb9m3hb5h2i5h8s5gjx0h3yszy9wg-openvswitch-3.7.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1

orc-0.4.41

/nix/store/vkrsl22bjnabsl3079czvbxk6bg883lf-orc-0.4.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8

perl-5.40.0

/nix/store/vif7qliqzlzmccf90d0412dkgnq523c5-perl-5.40.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0

/nix/store/0ydjk9mjp4g0v8yq3nl1d4c7f49c3pdn-perl-5.42.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0-binlore

/nix/store/lkir2dn7230jnszbvcrhxylx1ag3rsb6-perl-5.42.0-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

perl-5.42.0-env

/nix/store/m7qzsjqw3j6s0iq22cgfhallw02ziamy-perl-5.42.0-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-4176 9.8

php-calendar-8.4.21

/nix/store/mi9h4y5bq7m5b23p267f4q0gvybkmydv-php-calendar-8.4.21.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5

pip-20.3.4-source

/nix/store/5pyxs7z8qjifq85wrby0f55ymzih3vq1-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5

pods-2.3.0

pods-2.3.0-vendor

pods-2.3.0-vendor-staging

polkit-1.pam

/nix/store/gf6irj3ss7r47djgd1aapkbglhca7yr2-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.12

python-3.14.2

/nix/store/yr8jdsv7xy6k3hnjhvqa9sm6n987k1sf-python-3.14.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-3087 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-4519 3.3

rubygems-3.7.2

/nix/store/b7f1aw9my22s9ii0v13mrlw7ldd9y0a7-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3

safe-0.3.21

safe-0.3.21-r1.cabal

sassc-3.6.2

/nix/store/7p2g5jj8c448k0nckvaxdm96m95kqyy3-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

setuptools-44.0.0-source

/nix/store/ss5ifyrx3c5ck5jswrynscqs8wc4c002-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

shellcheck-0.11.0

/nix/store/4mn0nhhr5xpdy6qd3fpd8c0xrwamibp9-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

snappy-1.2.2

/nix/store/351rfian65nm4v4fyw1dfrsmk3cc63ky-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

stringbuilder-0.5.1

/nix/store/lysawwiyibl967jh2v87hhs2pk3j1xzv-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2

subversion-1.14.5

/nix/store/w8ip17c0bpcj7z15d9rdvny5vzpz6hzj-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3

systemd-2.4.0

/nix/store/b6c74v1qsygghqjv64mggnxq2yny52xa-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-40225 6.4
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7

taglib-1.13.1

/nix/store/h3r97izlfq453c1ymrismhfa4hl52i4d-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9

tap-1.0.1

/nix/store/987ps5krzldnwgymviq1nzaqh1q40rww-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

tar-0.6.4.0

tar-0.6.4.0-r4.cabal

uuid-1.3.16

/nix/store/r8g0cskp6vxcx47w60m54mx2898025cp-uuid-1.3.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5

uuid-1.3.16-r3.cabal

/nix/store/5z82dgfbnmzh9jw9sn9n19s15n321g8q-uuid-1.3.16-r3.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5

uuid-1.20.0

/nix/store/n5ckca3bq5x1qy4zsigh6c4pdw76ki46-uuid-1.20.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41907 7.5

vault-0.3.1.6

vim-9.2.0340

/nix/store/zvx0lzr62xi37a49dd1pwb9hcw4jy5sl-vim-9.2.0340.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-41411 6.6
https://nvd.nist.gov/vuln/detail/CVE-2026-44656 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-42307 4.4

warp-3.4.9

websockets-0.13.0.0

/nix/store/wbiy8d9bfywlx3g8hmhd8fc59hp1iv6f-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

websockets-0.13.0.0-r5.cabal

/nix/store/p95nbjw68cm9mcb5dkppaav8wmwlr9dq-websockets-0.13.0.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

wheel-0.37.1-source

/nix/store/81cbyxkgaiqac14kn6vhnp6yf2vxfvz3-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

word-wrap-0.5

/nix/store/9r7xq2rvzsl6ac1k6p25av7584pn1573-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3

xdg-dbus-proxy-0.1.6

/nix/store/vhhdrxmj96b0v9qk7ccn4682s80pj25h-xdg-dbus-proxy-0.1.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34080 5.5

xz-5.4.7

/nix/store/qgyzbksqicaw5fda7v490g5m57bzh76m-xz-5.4.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

xz-5.8.1

/nix/store/c93ng76ibm84gip7ivblv7fm17yav91f-xz-5.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

xz-5.8.2

/nix/store/gybip82sxvarqinbp7wx1ps22n9hgbnf-xz-5.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-34743 5.3

yaml-0.11.11.2

/nix/store/vqqzhc50yw43p2kw94b4nhacpbfxwd6h-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/5xmarhf49qi0g08ya827hac31whpxsm6-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yarn-1.22.22

/nix/store/rbbvzwlda6r56jhwsy8arvnq1clz5chz-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3

yasm-1.3.0

yoke-0.8.1

/nix/store/502k6kibb643fmp77ncv0322mnda3rim-yoke-0.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26056 8.8
https://nvd.nist.gov/vuln/detail/CVE-2026-26055 7.5

zlib-0.7.1.1

/nix/store/qwni87k17z7w9kqp61wya25425r2q4c8-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

zlib-1.3.1

/nix/store/y66rcdz3rdwrdxl0b3vjsllgvpwxqpcs-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9

zlib-1.3.2

/nix/store/rqz8g3rdk0jgy78v7dbf1jgr71if4wzp-zlib-1.3.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0

chore: update flake.lock & sources (2026-05-16)

c77df45

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Reputable2772 merged commit b816ea7 into master May 16, 2026
1 check passed

Reputable2772 deleted the flake-update/2026-20 branch May 16, 2026 18:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update flake.lock & sources (2026-05-16)#94

chore: update flake.lock & sources (2026-05-16)#94
Reputable2772 merged 1 commit into
masterfrom
flake-update/2026-20

Reputable2772 commented May 16, 2026

Uh oh!

github-actions Bot commented May 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Reputable2772 commented May 16, 2026

Uh oh!

github-actions Bot commented May 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant