NI
Product
nix
19
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Severity mix
Critical 0High 7Medium 6Low 6
Watch
Add nix to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52992 | 3.2 | Jun 27 | The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails Affected: before 2.24.15; 2.25.0 before 2.26.4; 2.27.0 before 2.28.4; 2.29.0 before 2.29.1 |
| CVE-2025-46415 | 3.2 | Jun 27 | A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders Affected: before 2.24.15; 2.25.0 before 2.26.4; 2.27.0 before 2.28.4; 2.29.0 before 2.29.1 |
| CVE-2025-52991 | 3.2 | Jun 27 | The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location Affected: before 2.24.15; 2.25.0 before 2.26.4; 2.27.0 before 2.28.4; 2.29.0 before 2.29.1 |
| CVE-2025-46416 | 2.9 | Jun 27 | The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account (e.g., nixbld or guixbuild) Affected: through 2.24.15; 2.25.0 through 2.26.4; 2.27.0 through 2.28.4; 2.29.0 through 2.29.1 |
| CVE-2026-64846 | 2.8 | Aug 20 | Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature Affected: < 2.35.0 |
| CVE-2024-51481 | 1.0 | Oct 31 | Nix allows macOS sandbox escape via built-in builders Affected: < 2.18.9; >= 2.19.0, < 2.19.7, 2.20.9, 2.21.5, 2.22.4, 2.23.4, 2.24.10; >= 2.20.0, < 2.20.9; >= 2.21.0, < 2.21.5; >= 2.22.0, < 2.22.4; >= 2.23.0, < 2.23.4; +1 more |
Showing 6