Login Request a demo
HY
Product
hydra
by NixOS · last CVE Aug 12, 2025
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 1
Severity
All severities5Critical0High2Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add hydra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54864
7.5
0%
Aug 12
Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins
Affected: < f7bda020c6144913f134ec616783e57817f7686f
CVE-2024-45049
7.5
1%
Aug 27
Nix Hydra Missing authentication when triggering evaluations
Affected: < f73043378907c2c7e44f633ad764c8bdd1c947d5
CVE-2025-54800
6.1
0%
Aug 12
Hydra persistent XSS in build metrics
Affected: < dea1e168f590efb27db32dbacc82b09e15f8ae4b
CVE-2024-32657
5.4
0%
Apr 22
Hydra has persistent XSS vulnerability serving HTML build outputs
Affected: < b72528be5074f3e62e9ae2c2ae8ef9c07a0b4dd3; < 23.11
CVE-2025-32435
2.6
0%
Apr 15
Hydra no restricted eval after nix-eval-jobs migration
Affected: < 8d750265135b7e203520036a742afdf301b4013f
Showing 5