Advisories · Technology
Nix.
Every CVE that names Nix among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Incorrect authorization in Nix
- Nix
- Broken access control
- CVSS 4.0 Medium
Nix: The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the…
- Nix
- CWE-708
- CVSS 4.3 Medium
Incorrect authorization in Nix
- Nix
- Broken access control
- CVSS 8.0 High
Nix: Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation…
- Nix
- CWE-696
- CVSS 7.5 High
Integer overflow in Nix
- Nix
- Memory corruption
- CVSS 2.8 Low
Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature
- nix
- Race condition
- CWE-61
- CVSS 5.3 Medium
Path traversal in Nix
- Nix
- Path traversal
- CVSS 7.5 High
Uncontrolled recursion in Nix and others
- Nix
- Lix
- Denial of service
- CVSS 9.0 CriticalCritical · CVSS 9+
Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination
- nix
- CWE-61
- CVSS 7.9 High
Nix's privilege dropping to build user broke for macOS
- nix
- CWE-271
- CVSS 5.6 Medium
Race condition in Nix
- Nix
- Race condition
- CVSS 3.2 Low
Incorrect permission assignment in Nix
- Nix
- Broken access control
- CVSS 3.2 Low
Incorrect default permissions in Nix
- Nix
- Broken access control
- CVSS 2.9 Low
Nix: The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user…
- Nix
- CWE-282
- CVSS 3.2 Low
Time-of-check time-of-use race condition in Nix
- Nix
- Race condition
- CVSS 1.0 Low
Nix allows macOS sandbox escape via built-in builders
- nix
- CWE-693
- CVSS 5.9 Medium
Credential leak when credentials are used with `<nix/fetchurl.nix>`
- nix
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
Nix affected by unsafe NAR unpacking
- nix
- Path traversal
- CVSS 3.6 Low
Nix sandbox escape
- nix
- CWE-278
- CVSS 6.3 Medium
Nix Corruption of fixed-output derivations
- nix
- Race condition