Known vulnerabilities in nix 2.18.2

Vendor: nixos.org
Software: nix
Version: 2.18.2
Software CPE: cpe:2.3:a:nixos.org:nix:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting nix version 2.18.2 nix 2.18.2 is affected by 4 vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155871 - Improper Authorization
CVE-2026-110450
CWE-285 Low
No
No
2.28.8, 2.30.6, 2.31.6, 2.34.9, 2.35.3 15.10.2026 SB2026101537
#VU155869 - Incorrect Ownership Assignment
CVE-2026-110452
CWE-708 Medium
No
No
2.28.8, 2.30.6, 2.31.6, 2.34.9, 2.35.3 15.10.2026 SB2026101537
#VU113004 - Untrusted Search Path
CVE-2024-38531
CWE-426 Medium
No
No
2.18.4, 2.19.5, 2.20.7, 2.21.3, 2.22.2, 2.23.1 16.07.2025 SB20250716131
SB20260408153
#VU125378 - Execution with Unnecessary Privileges
CVE-2024-51481
CWE-250 Low
No
No
2.18.9, 2.19.7, 2.20.9, 2.21.5, 2.22.4, 2.23.4, 2.24.10 31.10.2024 SB20241031112