NI
Product
nixpkgs
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch
Add nixpkgs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25137 | 9.1 | Feb 2 | NixOs Odoo database and filestore publicly accessible with default odoo configuration Affected: >= 21.11, < 25.11 |
| CVE-2026-23838 | 8.7 | Jan 19 | Tandoor Recipes module allows SQLite database to be externally accessible with the default settings Affected: >= 23.05, < 26.05 |
| CVE-2026-61828 | 8.5 | Jul 15 | nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server` Affected: < 25.11; >= 26.05-beta, < 26.05 |
| CVE-2026-25740 | 5.8 | Feb 9 | Privilege escalation to the `CAP_NET_RAW` capability via the `programs.captive-browser` NixOS module Affected: <= 25.05 |
| CVE-2025-64766 | 5.3 | Nov 17 | NixOS has hardcoded credentials in Onlyoffice module Affected: >= 22.11, < 25.05; < Unstable 25.11 |
Showing 5