| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-110452 | vulnerable | vulnerable | vulnerable | vulnerable | The multi-user installer in Nix before 2.35.3 sets the ownership of st ... |
| CVE-2026-110450 | vulnerable | vulnerable | vulnerable | vulnerable | Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via ... |
| CVE-2026-110449 | vulnerable | vulnerable | vulnerable | vulnerable | Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and r ... |
| CVE-2026-64846 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | Nix is a package manager for Linux and other Unix systems. Prior to 2. ... |
| CVE-2026-44029 | fixed | vulnerable (no DSA) | fixed | fixed | An issue was discovered in Nix before 2.34.7. Writing to arbitrary fil ... |
| CVE-2026-44028 | fixed | vulnerable (no DSA) | fixed | fixed | An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Un ... |
| CVE-2026-39860 | fixed | vulnerable (no DSA) | fixed | fixed | Nix is a package manager for Linux and other Unix systems. A bug in th ... |
| CVE-2024-47174 | vulnerable (no DSA) | fixed | fixed | fixed | Nix is a package manager for Linux and other Unix systems. Starting in ... |
| CVE-2024-38531 | vulnerable (no DSA) | fixed | fixed | fixed | Nix is a package manager for Linux and other Unix systems that makes p ... |
| CVE-2024-36050 | vulnerable (no DSA, postponed) | vulnerable (no DSA, postponed) | vulnerable | vulnerable | Nix through 2.22.1 mishandles certain usage of hash caches, which make ... |
| CVE-2024-27297 | vulnerable (no DSA) | fixed | fixed | fixed | Nix is a package manager for Linux and other Unix systems. A fixed-out ... |