NI
Product
nixpkgs
by NixOS · last CVE Jul 15, 2026
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch

Add nixpkgs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-32438
8.8
0%
Apr 15
Local privilege escalation in make-initrd-ng
Affected: < b17590193d8e5697000c23c66afcf11e1753734d; < fbf76bf72b161b9f4ab97704a8258776d5f3ffba
CVE-2026-23838
8.7
1%
Jan 19
Tandoor Recipes module allows SQLite database to be externally accessible with the default settings
Affected: >= 23.05, < 26.05
CVE-2026-61828
8.5
0%
Jul 15
nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`
Affected: < 25.11; >= 26.05-beta, < 26.05
Showing 3