Known vulnerabilities in nix

Vendor: Fedoraproject
Software: nix
Software CPE: cpe:2.3:o:fedoraproject:nix:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nix nix is affected by 3 known vulnerabilities: 3 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129558 - Uncontrolled Recursion
CVE-2026-44028		 CWE-674 Low
No
No
 2.31.5-1.el10_2 04.05.2026 SB2026050485
SB2026091492
#VU129557 - Absolute Path Traversal
CVE-2026-44029		 CWE-36 Low
No
No
 2.31.5-1.el10_2 04.05.2026 SB2026050485
SB2026091492
#VU125379 - UNIX Symbolic Link (Symlink) Following
CVE-2026-39860		 CWE-61 Low
No
No
 2.24.15-2.el10_1, 2.24.15-2.el10_2, 2.24.15-2.el10_3, 2.31.4-1.fc42, 2.31.4-1.fc43, 2.34.5-1.fc44 08.04.2026 SB20260408103
SB2026040968
SB2026040969
and 4 more