chore(deps): lock file maintenance #156

renovate · 2024-12-20T01:57:32Z

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

Configuration

📅 Schedule: Branch creation - "* 0-3 * * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2024-12-20T02:01:01Z

Report for `roland`

Version changes:

Version 1 -> 2:
  fzf: 0.56.3 → 0.57.0, +10.1 KiB
  index-x86_64: +509.4 KiB
  initrd-linux-hardened: 6.6.63 → 6.6.66
  lesspipe: 2.11 → ∅, -152.9 KiB
  libcpuid: 0.7.0 → 0.7.1
  linux-hardened: 6.6.63, 6.6.63-modules → 6.6.66, 6.6.66-modules, +57.3 KiB
  lowdown: 1.3.1 → 1.3.2
  mtools: 4.0.45 → 4.0.46
  nix: 2.24.10 → 2.24.11
  nixos-configuration-reference: +24.4 KiB
  nixos-manual: +80.4 KiB
  nixos-system-roland: 25.05.20241213.3566ab7 → 25.05.20241219.d70bd19
  nixvim-configuration-reference: -26.8 KiB
  source: +1307.1 KiB
  unit-network-online.target: ε → ∅
  unit-script-network-local-commands: ε → ∅
  unit-systemd-machine-id-commit.service: ∅ → ε
  zfs-kernel: 2.2.7-6.6.63 → 2.2.7-6.6.66

Security vulnerability report

68 derivations with active advisories 3 derivations left out due to whitelisting

audiofile-0.3.6

/nix/store/33f9bfl4x6qn8jr49j52f0pryrnw5dmi-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/2vigizx6r1i4xjlfk03h9fq50c3gsn4h-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/xh5rmqfsmg9f814wpi8n7x205sciiqkb-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/d7n6fnaji2cqsmkcclhkj16sk6i0wxf6-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6.1

/nix/store/wi6074xfzri3v5gcsnmk5y8fjxb5hyki-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

cups-2.4.11

/nix/store/mc35fihpsqdxbb0qgbq2kvw7fwx7fb8x-cups-2.4.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

dash-0.5.12

/nix/store/6sdcssnc6gwpynp5i4yyl26cfaq1m44r-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/y9xm0bjcc1hja0zwmj6zln28h1859qld-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/awfl020w2hnibwzk194scqz80a6njly9-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

ecdsa-0.14.8

/nix/store/mrjr2hkn329ahjhxblfjm0mpdcpxb0mc-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/jaj0k6xr2yg2kbfq87vk59gkdrbf0qp4-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

foundation-0.0.30

/nix/store/v61vgcs9af9c0qxjpji69ysxj38w5bqs-foundation-0.0.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-26304 7.5

fuse-2.9.9

/nix/store/3dzmyy01h2nc7zbbqrh3s06v6qfrbc4w-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/bq5w9cmpsj8wnkbbxqhfa4dc8yi9lwzs-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/6r7ana09inbjz1sm1d9ggwkl2f5fhkfp-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/nrvcrj7crcvwr3hc4mf1jx68kihnnzhk-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.47.0

/nix/store/cbpx5ig45dym04spy6l2l3prnvhj0q5l-git-2.47.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.3

/nix/store/k427v9wgcg9ify27mcqxrkpw5fd16xmg-go-1.23.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

gstreamer-1.24.7

h2-0.3.26

/nix/store/la8c8hy05cwxs9f086plk7l4z88fd3sq-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/n8m0szx8rydnlsw05qq2gmk21n4iy9rx-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/vyp2dxidpfn54bmxi8fzy4dpljyz75md-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/5gvv44apmf9l53735nh1ib822m5spmhy-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/bd7f3qsl19gbvbb55r0c8q6jqm5w3p8d-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/hrz7drnfvc91q04ralsgir75vrwnjlkr-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/glamhy314lmaad4fwh3pbxlf3k6spafw-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/dsl9rkzcvx8f886fsndlfh9xjhmcc433-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/bms54yvx38ivslv2ahc062r4h6r2h7xj-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/l4ahpf8vwi7x3wk1px9p8gk428b6qq1k-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

jbig2dec-0.20

/nix/store/pr1r7cdzm4laidhprixqyi5wz0sx15gj-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/wgiv4xssvs0j57051fv8b35skx4wvzvw-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libmemcached-1.0.18

/nix/store/fx9747kdbz0viharnphbf6hra15zg111-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/6vfab32frsmailcdd0vi0r32m7iy970n-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/5jpz1h5rrgcwjxf3r749ilm6whmby4q4-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5

lodepng-3.10.1

/nix/store/5nhrpz5qkiqps4lk5f30pqvdldx67rjl-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/kzljwjjq7fqrn0gf15dn4p27vdcky8pl-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/g1i3n3x11pzm8jna8rfq5w93hvcvrr6l-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/62h1d1wfphcjisphklngqp99wv4zf5zk-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openvpn-2.6.12

/nix/store/jfwxlb42d7mn9m234dg3zbxmmcmaf2ym-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/q1lc7fcv1y4b80hhgch0nr6kraanhlm8-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/5q6hvac0xdr3yv98fs0f71k8xwpbf601-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

polkit-1.pam

/nix/store/nljyrqyg5adz7xa3i8g3ks06yr6x4fi3-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.8

quote-1.0.36

/nix/store/l7vf84jx0qkgygbf74qlywsyb95xi6pi-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/hi6v9jf3k8qxhl7abxdagsl8ika8frpi-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.22

/nix/store/v77a7dw77ihbzx4r1xambbsv5b0mj9p0-rubygems-3.5.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/xg8ybhp9kivg4q8lq8q5km1xlngid680-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/bcza9qr27p4jm48sqbqsxlcjxyk1lxfg-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.23

/nix/store/rsziza4ljh27xn10j8bxi50nybg2g69g-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/5jksm485yv19fb868gl9rx77zk9qczxq-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

stringbuilder-0.5.1

/nix/store/sm2lzymsmx96442235r9cbrk5ijc53yg-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/mwlwr419l571yw7ijphq2mlrzi0l2rhp-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/w7v70dyrx6rq30f6iji1zp9l6gr3ivhz-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/1qiw444q1clmvzlj1s1d48kb1m14i8v7-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/yzv0ggapmjwr6428sjw50xlqxqxynwlv-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/qncxxbpskz1vkvzq207q84sjaywniyfh-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/q60agwlkq829gp1c6sqh90fb691ympa0-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/0gcka4h1y9ah9h7jkpam6glw9jgm4zaj-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/6nvdzyjrhc9h84y2iqby9qpzw0v7gz4d-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-12-20T02:01:27Z

Report for `marlon`

Version changes:

Version 1 -> 2:
  catatonit: 0.2.0 → 0.2.1
  crun: 1.19 → 1.19.1
  docker: 27.3.1 → 27.4.0, +205.4 KiB
  docker-buildx: 0.18.0 → 0.19.3, +425.6 KiB
  docker-compose: 2.30.3 → 2.31.0, +195.6 KiB
  docker-containerd: 27.3.1 → 27.4.0, +187.9 KiB
  docker-init: 27.3.1 → 27.4.0
  docker-runc: 27.3.1 → 27.4.0, +842.6 KiB
  fzf: 0.56.3 → 0.57.0, +10.1 KiB
  index-x86_64: +509.4 KiB
  initrd: ε → ∅
  initrd-linux-hardened: 6.6.63 → 6.6.66
  lesspipe: 2.11 → ∅, -152.9 KiB
  libcpuid: 0.7.0 → 0.7.1
  linux-hardened: 6.6.63, 6.6.63-modules → 6.6.66, 6.6.66-modules, +57.0 KiB
  lowdown: 1.3.1 → 1.3.2
  moby: 27.3.1 → 27.4.0
  mtools: 4.0.45 → 4.0.46
  nix: 2.24.10 → 2.24.11
  nixos-configuration-reference: +24.4 KiB
  nixos-manual: +80.4 KiB
  nixos-system-marlon: 25.05.20241213.3566ab7 → 25.05.20241219.d70bd19
  nixvim-configuration-reference: -26.8 KiB
  passt: 2024_10_30.ee7d0b6 → 2024_11_27.c0fbc7e
  source: +1307.1 KiB
  unit-network-online.target: ε → ∅
  unit-script-network-local-commands: ε → ∅
  unit-systemd-machine-id-commit.service: ∅ → ε
  zfs-kernel: 2.2.7-6.6.63 → 2.2.7-6.6.66

Security vulnerability report

69 derivations with active advisories 3 derivations left out due to whitelisting

audiofile-0.3.6

/nix/store/33f9bfl4x6qn8jr49j52f0pryrnw5dmi-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/2vigizx6r1i4xjlfk03h9fq50c3gsn4h-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/xh5rmqfsmg9f814wpi8n7x205sciiqkb-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/d7n6fnaji2cqsmkcclhkj16sk6i0wxf6-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6.1

/nix/store/wi6074xfzri3v5gcsnmk5y8fjxb5hyki-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

cups-2.4.11

/nix/store/mc35fihpsqdxbb0qgbq2kvw7fwx7fb8x-cups-2.4.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

dash-0.5.12

/nix/store/6sdcssnc6gwpynp5i4yyl26cfaq1m44r-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/y9xm0bjcc1hja0zwmj6zln28h1859qld-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/d79a7ih0zij6ngxxnks54qnipw8pp7qs-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

ecdsa-0.14.8

/nix/store/mrjr2hkn329ahjhxblfjm0mpdcpxb0mc-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/jaj0k6xr2yg2kbfq87vk59gkdrbf0qp4-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

foundation-0.0.30

/nix/store/v61vgcs9af9c0qxjpji69ysxj38w5bqs-foundation-0.0.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-26304 7.5

fuse-2.9.9

/nix/store/3dzmyy01h2nc7zbbqrh3s06v6qfrbc4w-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/bq5w9cmpsj8wnkbbxqhfa4dc8yi9lwzs-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/6r7ana09inbjz1sm1d9ggwkl2f5fhkfp-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/nrvcrj7crcvwr3hc4mf1jx68kihnnzhk-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.47.0

/nix/store/cbpx5ig45dym04spy6l2l3prnvhj0q5l-git-2.47.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.3

/nix/store/k427v9wgcg9ify27mcqxrkpw5fd16xmg-go-1.23.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

gstreamer-1.24.7

h2-0.3.26

/nix/store/la8c8hy05cwxs9f086plk7l4z88fd3sq-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/n8m0szx8rydnlsw05qq2gmk21n4iy9rx-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/vyp2dxidpfn54bmxi8fzy4dpljyz75md-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/5gvv44apmf9l53735nh1ib822m5spmhy-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/bd7f3qsl19gbvbb55r0c8q6jqm5w3p8d-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/hrz7drnfvc91q04ralsgir75vrwnjlkr-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/glamhy314lmaad4fwh3pbxlf3k6spafw-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/dsl9rkzcvx8f886fsndlfh9xjhmcc433-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/bms54yvx38ivslv2ahc062r4h6r2h7xj-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/l4ahpf8vwi7x3wk1px9p8gk428b6qq1k-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

jbig2dec-0.20

/nix/store/pr1r7cdzm4laidhprixqyi5wz0sx15gj-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/wgiv4xssvs0j57051fv8b35skx4wvzvw-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libmemcached-1.0.18

/nix/store/fx9747kdbz0viharnphbf6hra15zg111-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/6vfab32frsmailcdd0vi0r32m7iy970n-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/5jpz1h5rrgcwjxf3r749ilm6whmby4q4-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5

lodepng-3.10.1

/nix/store/5nhrpz5qkiqps4lk5f30pqvdldx67rjl-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

mercurial-6.8.2

/nix/store/p32wc5msa10zwg9bmvrbjhkv0wanbzjv-mercurial-6.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/kzljwjjq7fqrn0gf15dn4p27vdcky8pl-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/g1i3n3x11pzm8jna8rfq5w93hvcvrr6l-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/62h1d1wfphcjisphklngqp99wv4zf5zk-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openvpn-2.6.12

/nix/store/jfwxlb42d7mn9m234dg3zbxmmcmaf2ym-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/q1lc7fcv1y4b80hhgch0nr6kraanhlm8-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/5q6hvac0xdr3yv98fs0f71k8xwpbf601-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

polkit-1.pam

/nix/store/nljyrqyg5adz7xa3i8g3ks06yr6x4fi3-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.8

quote-1.0.36

/nix/store/l7vf84jx0qkgygbf74qlywsyb95xi6pi-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/hi6v9jf3k8qxhl7abxdagsl8ika8frpi-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.22

/nix/store/v77a7dw77ihbzx4r1xambbsv5b0mj9p0-rubygems-3.5.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/xg8ybhp9kivg4q8lq8q5km1xlngid680-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/bcza9qr27p4jm48sqbqsxlcjxyk1lxfg-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.23

/nix/store/rsziza4ljh27xn10j8bxi50nybg2g69g-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/5jksm485yv19fb868gl9rx77zk9qczxq-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

stringbuilder-0.5.1

/nix/store/sm2lzymsmx96442235r9cbrk5ijc53yg-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/mwlwr419l571yw7ijphq2mlrzi0l2rhp-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/w7v70dyrx6rq30f6iji1zp9l6gr3ivhz-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/1qiw444q1clmvzlj1s1d48kb1m14i8v7-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/yzv0ggapmjwr6428sjw50xlqxqxynwlv-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/qncxxbpskz1vkvzq207q84sjaywniyfh-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/q60agwlkq829gp1c6sqh90fb691ympa0-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/0gcka4h1y9ah9h7jkpam6glw9jgm4zaj-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/6nvdzyjrhc9h84y2iqby9qpzw0v7gz4d-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-12-20T02:01:43Z

Report for `elmira`

Version changes:

Version 1 -> 2:'
'  darwin-system: 25.05.20241213.3566ab7+darwin4.a35b08d → 25.05.20241219.d70bd19+darwin4.a35b08d'
'  fzf: 0.56.3 → 0.57.0'
'  index-aarch64: +434.4 KiB'
'  lowdown: 1.3.1 → 1.3.2'
'  nix: 2.24.10 → 2.24.11, +18.3 KiB'
'  nixvim-configuration-reference: -26.8 KiB'
'  source: +1307.1 KiB

Security vulnerability report

52 derivations with active advisories'
'3 derivations left out due to whitelisting'
''
'------------------------------------------------------------------------'
'Security-11.0'
''
'/nix/store/8s02ah1zhb0d48sdawhpq3znfcwrjyhn-Security-11.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-34893    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37347    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37348    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2024-3779     5.5'
''
'------------------------------------------------------------------------'
'cereal-0.5.8.3'
''
'/nix/store/fqdaic4pxq73yp3mbf40fspqm41xl5a3-cereal-0.5.8.3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11105    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11104    5.3'
''
'------------------------------------------------------------------------'
'commonmark-0.2.6.1'
''
'/nix/store/3vbh3f2b8fn8f5wzvq6d41vxiwj163wj-commonmark-0.2.6.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-10010    6.1'
''
'------------------------------------------------------------------------'
'dash-0.5.12'
''
'/nix/store/syiqp220v10vdxvx6rpw7p6qvy5mkg4q-dash-0.5.12.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-21485    5.4'
''
'------------------------------------------------------------------------'
'ecdsa-0.14.8'
''
'/nix/store/jfb5x2iwdzyx648a7bqisr7q9wnwjxx2-ecdsa-0.14.8.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23342    7.4'
''
'------------------------------------------------------------------------'
'flex-2.6.4'
''
'/nix/store/aq3ifqrvdhw42laabmfcm6vb3lxzrwnh-flex-2.6.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-6293     5.5'
''
'------------------------------------------------------------------------'
'foundation-0.0.30'
''
'/nix/store/9ncjr2b8a6w0fm1zkyy36ca48vgmzfif-foundation-0.0.30.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-26304    7.5'
''
'------------------------------------------------------------------------'
'gcc-13.3.0'
''
'/nix/store/824k5i2l0xfqsiickh908a1wfps0wkyg-gcc-13.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-4039     4.8'
''
'------------------------------------------------------------------------'
'git-2.47.0'
''
'/nix/store/532v9bs2f5mya9wbp9k76c0b8bp1760c-git-2.47.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36882    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-30947    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36883    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38663    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-21684    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-2136     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36884    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-1003010  4.3'
''
'------------------------------------------------------------------------'
'go-1.21.0-darwin-arm64-bootstrap'
''
'/nix/store/i2rxxi4vgq4d7p2vdr9sysf519ww4wdc-go-1.21.0-darwin-arm64-bootstrap.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39320    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2024-24790    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39323    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39321    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39322    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39325    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-44487    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39318    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39319    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2024-24789    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-49292    4.8'
''
'------------------------------------------------------------------------'
'go-1.23.3'
''
'/nix/store/56rv2z6sv5b1vzica5xpszjqvd21gqr7-go-1.23.3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-49292    4.8'
''
'------------------------------------------------------------------------'
'h2-0.3.26'
''
'/nix/store/i68ralxaqsdqfn2a5xysj96s51lahgiv-h2-0.3.26.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-45868    7.8'
''
'------------------------------------------------------------------------'
'h2-0.4.6'
''
'/nix/store/jk7n22vd1bxw51hxqwx60sp44krg6xd7-h2-0.4.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-45868    7.8'
''
'------------------------------------------------------------------------'
'hedgehog-1.4'
''
'/nix/store/xkfx0725smd1hmk3yaghs2bma6117yqa-hedgehog-1.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4276     8.8'
''
'------------------------------------------------------------------------'
'hedgehog-1.4-r8.cabal'
''
'/nix/store/nq5c7c89qsvqa6sknr408pg4vh91m7a4-hedgehog-1.4-r8.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4276     8.8'
''
'------------------------------------------------------------------------'
'home-0.5.9'
''
'/nix/store/3l3v21m6iy421gmfn9sm3l87kmm0lfbz-home-0.5.9.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-3612     8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-25264    6.7'
''
'------------------------------------------------------------------------'
'http-0.2.12'
''
'/nix/store/bqzh9sjirqnym8vp5k6cjim9iwdzmik5-http-0.2.12.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-35669    6.1'
''
'------------------------------------------------------------------------'
'http-1.1.0'
''
'/nix/store/zh8bzvh79ak7x9vb5ddihz04w0g37l9z-http-1.1.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36032    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-26044    5.3'
''
'------------------------------------------------------------------------'
'http-client-0.7.17'
''
'/nix/store/i371rnbqgdx5vy1d3r4p18bh3iz2nln7-http-client-0.7.17.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5'
''
'------------------------------------------------------------------------'
'hyper-0.14.30'
''
'/nix/store/cgqn64ni143xnymmga3acq3a4aha49vk-hyper-0.14.30.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23741    9.8'
''
'------------------------------------------------------------------------'
'hyper-1.4.1'
''
'/nix/store/iwanr6fkxcw42dsk3mlb6mr958wzk28h-hyper-1.4.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23741    9.8'
''
'------------------------------------------------------------------------'
'jbig2dec-0.20'
''
'/nix/store/jqgl7lrp3yi2wfv94q5fzdxxfh0jy713-jbig2dec-0.20.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-46361    6.5'
''
'------------------------------------------------------------------------'
'lapack-3'
''
'/nix/store/03dfqmvqfn35z23r0n127qj74mq27l3g-lapack-3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4048     9.1'
''
'------------------------------------------------------------------------'
'libmemcached-1.0.18'
''
'/nix/store/hm8jg8634ypid9dcab3lbdsd05dl0zj4-libmemcached-1.0.18.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-27478    6.5'
''
'------------------------------------------------------------------------'
'lodepng-3.10.1'
''
'/nix/store/b2b6c0lk1mnxis2awp3nhn69nvpyaj8b-lodepng-3.10.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-17178    7.5'
''
'------------------------------------------------------------------------'
'lua-5.2.4'
''
'/nix/store/kbg5d1dsilj7jhalfpygxaw3206fqddp-lua-5.2.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-43519    5.5'
''
'------------------------------------------------------------------------'
'mercurial-6.8.2'
''
'/nix/store/syiyvn8ml0796hky88ciywsi63dazn59-mercurial-6.8.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-43410    5.3'
''
'------------------------------------------------------------------------'
'network-3.1.4.0'
''
'/nix/store/1xq6nzanl3knp3szshykx0vhagd655dl-network-3.1.4.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24388    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24389    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24390    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24391    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24392    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24393    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24394    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0486     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0997     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5'
''
'------------------------------------------------------------------------'
'network-3.1.4.0-r1.cabal'
''
'/nix/store/wnbxm5d98hni7m1z34s9prm5cnmmj02k-network-3.1.4.0-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24388    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24389    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24390    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24391    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24392    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24393    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24394    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0486     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0997     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5'
''
'------------------------------------------------------------------------'
'ninja-1.12.1'
''
'/nix/store/d83j6fyglfwgnxvmpzs2yyrsvs2ibdlh-ninja-1.12.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4336     9.8'
''
'------------------------------------------------------------------------'
'numpy-0.21.0'
''
'/nix/store/shjs34smxv1bxaq5881lzcvpzyx14166-numpy-0.21.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-6446     9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41496    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-34141    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41495    5.3'
''
'------------------------------------------------------------------------'
'oh-my-zsh-2024-10-01'
''
'/nix/store/z9s6xlixdgdkryzfd1pigdhr1wk9z9qd-oh-my-zsh-2024-10-01.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3727     9.8'
''
'------------------------------------------------------------------------'
'openmp-16.0.6'
''
'/nix/store/4zdkm2lvg3vx03ck32bbg3liyc7s60kp-openmp-16.0.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-26345    7.3'
''
'------------------------------------------------------------------------'
'patch-2.7.6'
''
'/nix/store/vk5fhpp00gjvyygdr1ggax3wvga6mygx-patch-2.7.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-20633    5.5'
''
'------------------------------------------------------------------------'
'quote-1.0.36'
''
'/nix/store/fq2dqajqaksnjip6jx3wciqy47ahs1x7-quote-1.0.36.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3'
''
'------------------------------------------------------------------------'
'quote-1.0.37'
''
'/nix/store/wxw6g6alf7r2mi78ba1lzzxkzfhgzvlj-quote-1.0.37.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3'
''
'------------------------------------------------------------------------'
'rubygems-3.5.22'
''
'/nix/store/cg5qk8lgqrr7x3rxwn87fb1isj7zfh62-rubygems-3.5.22.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36073    8.8'
''
'------------------------------------------------------------------------'
'safe-0.3.21'
''
'/nix/store/gwmrid703gd8rgwmh3cxdsyvgwb9gf6g-safe-0.3.21.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28872    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38164    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-47524    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28868    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28869    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28870    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28873    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38163    3.5'
''
'------------------------------------------------------------------------'
'safe-0.3.21-r1.cabal'
''
'/nix/store/dvfaqg9ndj1nr7c6p0gpas3g9l3w106v-safe-0.3.21-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28872    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38164    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-47524    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28868    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28869    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28870    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28873    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38163    3.5'
''
'------------------------------------------------------------------------'
'sassc-3.6.2'
''
'/nix/store/3mvr0ii24r9r94vjhgmw9d8bfjiya9gh-sassc-3.6.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-43357    7.5'
''
'------------------------------------------------------------------------'
'semver-1.0.23'
''
'/nix/store/wy01sm2dcn9889nkmi401yizq8i1r31s-semver-1.0.23.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-25883    7.5'
''
'------------------------------------------------------------------------'
'shellcheck-0.10.0'
''
'/nix/store/jkxmdgdcabar2s0sl6fa6rl6q7gizv1c-shellcheck-0.10.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-28794    9.8'
''
'------------------------------------------------------------------------'
'stringbuilder-0.5.1'
''
'/nix/store/n5r898qd74adxylx19xp3xfh2lqbbxv6-stringbuilder-0.5.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-21524    9.1'
''
'------------------------------------------------------------------------'
'vault-0.3.1.5'
''
'/nix/store/y53za039n60hswv7nw42zhbpp242gixf-vault-0.3.1.5.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-24999    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6337     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0620     6.7'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0665     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2024-8365     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2121     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-41316    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-25000    4.7'
''
'------------------------------------------------------------------------'
'vault-0.3.1.5-r8.cabal'
''
'/nix/store/lw5r9ba13k3wmwgpqzwkylmhzbjkr7wm-vault-0.3.1.5-r8.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-24999    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6337     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0620     6.7'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0665     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2024-8365     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2121     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-41316    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-25000    4.7'
''
'------------------------------------------------------------------------'
'warp-3.3.31'
''
'/nix/store/fgn3kz2r7z5rs0c7ywqyizs28h3dh557-warp-3.3.31.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3320     9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3512     8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-4428     8.0'
'https://nvd.nist.gov/vuln/detail/CVE-2022-2145     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-2225     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0652     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-1412     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-1862     7.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2754     6.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-4457     5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0238     5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0654     3.7'
''
'------------------------------------------------------------------------'
'yaml-0.11.11.2'
''
'/nix/store/ld18fj0d65dan718nj4c6ms9ivnzzh0j-yaml-0.11.11.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3064     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4235     5.5'
''
'------------------------------------------------------------------------'
'yaml-0.11.11.2-r2.cabal'
''
'/nix/store/7lbj983zx4p06l00kypcdb5712jppp8g-yaml-0.11.11.2-r2.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3064     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4235     5.5'
''
'------------------------------------------------------------------------'
'yasm-1.3.0'
''
'/nix/store/szkq70g20r8vvy1srw8fn8gwldzv81w1-yasm-1.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33454    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33455    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33456    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33457    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33458    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33459    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33460    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33461    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33462    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33463    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33464    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33465    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33466    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33467    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33468    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-30402    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31972    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31973    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31974    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-51258    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31975    3.3'
''
'------------------------------------------------------------------------'
'zlib-0.6.3.0'
''
'/nix/store/w1yif1zs84x3k23cbhvhsykn4vagqw63-zlib-0.6.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37434    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-45853    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'------------------------------------------------------------------------'
'zlib-0.6.3.0-r5.cabal'
''
'/nix/store/5x38kh6aqxbya3yvpb3j2ab7y8agbrj5-zlib-0.6.3.0-r5.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37434    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-45853    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'------------------------------------------------------------------------'
'zlib-1.3.1'
''
'/nix/store/3iwp0i2j6dpmkx2l0cxqcknmn3v3iw1a-zlib-1.3.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-12-20T02:02:15Z

Report for `vic`

Version changes:

Version 1 -> 2:
  firefox: -11.3 KiB
  firefox-unwrapped: +260.8 KiB
  fzf: 0.56.3 → 0.57.0, +10.1 KiB
  index-x86_64: +509.4 KiB
  initrd-linux-hardened: 6.6.63 → 6.6.66
  lesspipe: 2.11 → ∅, -152.9 KiB
  libblockdev: 3.1.1 → 3.2.1, +159.3 KiB
  libcpuid: 0.7.0 → 0.7.1
  linux-hardened: 6.6.63, 6.6.63-modules → 6.6.66, 6.6.66-modules, +54.0 KiB
  lowdown: 1.3.1 → 1.3.2
  mtools: 4.0.45 → 4.0.46
  nix: 2.24.10 → 2.24.11
  nixos-configuration-reference: +24.4 KiB
  nixos-manual: +80.4 KiB
  nixos-system-vic: 25.05.20241213.3566ab7 → 25.05.20241219.d70bd19
  nixvim-configuration-reference: -26.8 KiB
  pcaudiolib: 1.2 → 1.3
  source: +1307.1 KiB
  unar: 1.10.7 → 1.10.8
  unit-network-online.target: ε → ∅
  unit-script-network-local-commands: ε → ∅

Security vulnerability report

80 derivations with active advisories 3 derivations left out due to whitelisting

accountsservice-23.13.9

/nix/store/wxmm11si9srx654zczwg8wfnrzy2qflr-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 7.8

audiofile-0.3.6

/nix/store/33f9bfl4x6qn8jr49j52f0pryrnw5dmi-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/2vigizx6r1i4xjlfk03h9fq50c3gsn4h-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/xh5rmqfsmg9f814wpi8n7x205sciiqkb-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/d7n6fnaji2cqsmkcclhkj16sk6i0wxf6-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6.1

/nix/store/wi6074xfzri3v5gcsnmk5y8fjxb5hyki-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

console-0.15.8

/nix/store/b0663h39pq4ak57njwjc39nk05qsn12b-console-0.15.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-33955 5.3

cups-2.4.11

/nix/store/mc35fihpsqdxbb0qgbq2kvw7fwx7fb8x-cups-2.4.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

dash-0.5.12

/nix/store/6sdcssnc6gwpynp5i4yyl26cfaq1m44r-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/y9xm0bjcc1hja0zwmj6zln28h1859qld-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/p87z8n0b7y0459ky8c9byyzppw8j7bnm-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

djvulibre-3.5.28

/nix/store/bp9gc25k1ascvcpx5lqnjixi77gwhs2n-djvulibre-3.5.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-46310 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-46312 6.5

ecdsa-0.14.8

/nix/store/mrjr2hkn329ahjhxblfjm0mpdcpxb0mc-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/jaj0k6xr2yg2kbfq87vk59gkdrbf0qp4-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

foundation-0.0.30

/nix/store/v61vgcs9af9c0qxjpji69ysxj38w5bqs-foundation-0.0.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-26304 7.5

fuse-2.9.9

/nix/store/3dzmyy01h2nc7zbbqrh3s06v6qfrbc4w-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/bq5w9cmpsj8wnkbbxqhfa4dc8yi9lwzs-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/6r7ana09inbjz1sm1d9ggwkl2f5fhkfp-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/nrvcrj7crcvwr3hc4mf1jx68kihnnzhk-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.47.0

/nix/store/cbpx5ig45dym04spy6l2l3prnvhj0q5l-git-2.47.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.3

/nix/store/k427v9wgcg9ify27mcqxrkpw5fd16xmg-go-1.23.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

gstreamer-1.24.7

h2-0.3.26

/nix/store/la8c8hy05cwxs9f086plk7l4z88fd3sq-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/n8m0szx8rydnlsw05qq2gmk21n4iy9rx-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/vyp2dxidpfn54bmxi8fzy4dpljyz75md-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/5gvv44apmf9l53735nh1ib822m5spmhy-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/bd7f3qsl19gbvbb55r0c8q6jqm5w3p8d-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/hrz7drnfvc91q04ralsgir75vrwnjlkr-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/glamhy314lmaad4fwh3pbxlf3k6spafw-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/dsl9rkzcvx8f886fsndlfh9xjhmcc433-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/bms54yvx38ivslv2ahc062r4h6r2h7xj-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/l4ahpf8vwi7x3wk1px9p8gk428b6qq1k-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

imagemagick-7.1.1-40

/nix/store/lkwg2gdxjsy6xlwg2prfw6aww78yhqdk-imagemagick-7.1.1-40.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5341 5.5

jbig2dec-0.20

/nix/store/pr1r7cdzm4laidhprixqyi5wz0sx15gj-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/wgiv4xssvs0j57051fv8b35skx4wvzvw-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libmemcached-1.0.18

/nix/store/fx9747kdbz0viharnphbf6hra15zg111-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/6vfab32frsmailcdd0vi0r32m7iy970n-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/5jpz1h5rrgcwjxf3r749ilm6whmby4q4-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5

lodepng-3.10.1

/nix/store/5nhrpz5qkiqps4lk5f30pqvdldx67rjl-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

lua-5.2.4

/nix/store/bnk0zzw50g1a873mcca8smiaa05pz5qc-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

mercurial-6.8.2

/nix/store/p32wc5msa10zwg9bmvrbjhkv0wanbzjv-mercurial-6.8.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/kzljwjjq7fqrn0gf15dn4p27vdcky8pl-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/g1i3n3x11pzm8jna8rfq5w93hvcvrr6l-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/62h1d1wfphcjisphklngqp99wv4zf5zk-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openexr-2.5.10

/nix/store/gqaiad7zvd7q09gjgk5h7lh87995fcdy-openexr-2.5.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5841 9.1
https://nvd.nist.gov/vuln/detail/CVE-2021-23169 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-3598 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-3605 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-23215 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-26260 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-26945 5.5

openvpn-2.6.12

/nix/store/jfwxlb42d7mn9m234dg3zbxmmcmaf2ym-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/q1lc7fcv1y4b80hhgch0nr6kraanhlm8-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/5q6hvac0xdr3yv98fs0f71k8xwpbf601-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

plasma-workspace-5.27.11.1

/nix/store/mdl4d05rrwbcxbrafvqmxm77l3j3vqak-plasma-workspace-5.27.11.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-1433 3.7

polkit-1.pam

/nix/store/x1pqciwhc17v8kn03yz1fhnb20kp1282-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.8

quote-1.0.35

/nix/store/zd1idjxd30vqkwgqrpk7qnawlhmfqv1n-quote-1.0.35.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.36

/nix/store/l7vf84jx0qkgygbf74qlywsyb95xi6pi-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/hi6v9jf3k8qxhl7abxdagsl8ika8frpi-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.22

/nix/store/v77a7dw77ihbzx4r1xambbsv5b0mj9p0-rubygems-3.5.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/xg8ybhp9kivg4q8lq8q5km1xlngid680-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/bcza9qr27p4jm48sqbqsxlcjxyk1lxfg-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.22

/nix/store/7rwmjn0r51pay6wzhlzbgg75cg3msl8j-semver-1.0.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

semver-1.0.23

/nix/store/rsziza4ljh27xn10j8bxi50nybg2g69g-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/5jksm485yv19fb868gl9rx77zk9qczxq-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

snappy-1.2.1

/nix/store/aj9vsrpz2vwcpg9fzjvf3fk04583n3is-snappy-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

stringbuilder-0.5.1

/nix/store/sm2lzymsmx96442235r9cbrk5ijc53yg-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

tap-1.0.1

/nix/store/4ki4wqyf0wa89p21609z91cph01m85q8-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/mwlwr419l571yw7ijphq2mlrzi0l2rhp-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/w7v70dyrx6rq30f6iji1zp9l6gr3ivhz-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/1qiw444q1clmvzlj1s1d48kb1m14i8v7-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/yzv0ggapmjwr6428sjw50xlqxqxynwlv-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/qncxxbpskz1vkvzq207q84sjaywniyfh-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/q60agwlkq829gp1c6sqh90fb691ympa0-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/0gcka4h1y9ah9h7jkpam6glw9jgm4zaj-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/6nvdzyjrhc9h84y2iqby9qpzw0v7gz4d-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

chore(deps): lock file maintenance

001a947

renovate bot force-pushed the renovate/lock-file-maintenance branch from 1427a20 to 001a947 Compare December 24, 2024 16:47

NoRePercussions merged commit 716c00f into main Dec 25, 2024
4 checks passed

NoRePercussions deleted the renovate/lock-file-maintenance branch December 25, 2024 02:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): lock file maintenance #156

chore(deps): lock file maintenance #156

renovate bot commented Dec 20, 2024 •

edited

Loading

github-actions bot commented Dec 20, 2024 •

edited

Loading

github-actions bot commented Dec 20, 2024 •

edited

Loading

github-actions bot commented Dec 20, 2024 •

edited

Loading

github-actions bot commented Dec 20, 2024 •

edited

Loading

chore(deps): lock file maintenance #156

chore(deps): lock file maintenance #156

Conversation

renovate bot commented Dec 20, 2024 • edited Loading

Configuration

github-actions bot commented Dec 20, 2024 • edited Loading

Report for roland

github-actions bot commented Dec 20, 2024 • edited Loading

Report for marlon

github-actions bot commented Dec 20, 2024 • edited Loading

Report for elmira

github-actions bot commented Dec 20, 2024 • edited Loading

Report for vic

renovate bot commented Dec 20, 2024 •

edited

Loading

github-actions bot commented Dec 20, 2024 •

edited

Loading

Report for `roland`

github-actions bot commented Dec 20, 2024 •

edited

Loading

Report for `marlon`

github-actions bot commented Dec 20, 2024 •

edited

Loading

Report for `elmira`

github-actions bot commented Dec 20, 2024 •

edited

Loading

Report for `vic`