chore(deps): lock file maintenance #122

renovate · 2024-11-01T00:52:39Z

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

Configuration

📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2024-11-01T00:56:05Z

Report for `marlon`

Version changes:

Version 1 -> 2:
  crun: 1.17 → 1.18, +24.9 KiB
  desktop-grammar: ∅ → 0.0.0+rev=0d8b8cf, +27.6 KiB
  editorconfig-grammar: 0.0.0+rev=777f774 → 0.0.0+rev=38cf8d0
  elixir-grammar: 0.0.0+rev=2ac7a0f → 0.0.0+rev=5345854
  fortran-grammar: 0.0.0+rev=4a593dd → 0.0.0+rev=cb4cb11, +320.0 KiB
  fzf: 0.55.0 → 0.56.0
  gvproxy: 0.7.5 → 0.8.0, +176.2 KiB
  javascript-grammar: 0.0.0+rev=c4ce9dc → 0.0.0+rev=a2ef079, -12.2 KiB
  just-grammar: 0.0.0+rev=6aee3d2 → 0.0.0+rev=1014d2f
  koto-grammar: 0.0.0+rev=cbf637e → 0.0.0+rev=9e5ab09, +2320.3 KiB
  less: -27.4 KiB
  lowdown: 1.1.2 → 1.2.0
  mlir-grammar: 0.0.0+rev=0238b7f → 0.0.0+rev=8cde51a
  nix: +100.6 KiB
  nixos-configuration-reference: +8.9 KiB
  nixos-manual: +26.2 KiB
  nixos-system-marlon: 24.11.20241025.18536bf → 24.11.20241029.807e915
  nsncd: 1.4.1-unstable-2024-10-03 → 1.5.1, +33.1 KiB
  source: +466.2 KiB
  superhtml-grammar: 0.0.0+rev=3325bbb → 0.0.0+rev=e561df3
  swift-grammar: 0.0.0+rev=d351cb3 → 0.0.0+rev=5098007
  t32-grammar: 0.0.0+rev=0f6a5b1 → 0.0.0+rev=e455373
  templ-grammar: 0.0.0+rev=4519e3e → 0.0.0+rev=1dcd7db
  tlaplus-grammar: 0.0.0+rev=8a8413f → 0.0.0+rev=ffb6c4b
  vimdoc-grammar: 0.0.0+rev=59c5392 → 0.0.0+rev=d2e4b5c
  vimplugin-nvim-lspconfig: 2024-10-23 → 2024-10-28, +10.1 KiB
  vimplugin-nvim-treesitter: 2024-10-23 → 2024-10-28

Security vulnerability report

70 derivations with active advisories 4 derivations left out due to whitelisting

audiofile-0.3.6

/nix/store/84k0f925hjy6h6imspq8bj7clnfqn6cz-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/wp2g0fj70id9qgdiwvsc17zrz42p7b2r-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/p5r9lbjkwh3f81zd1d6hq3cbl8iykbg8-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/8ygvapcm50v0n3hyk21k1zm0jg90p4n0-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6

/nix/store/qfp7p9lpfcpc8nb1ipz474pdsb786dcg-commonmark-0.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

dash-0.5.12

/nix/store/hin7grimy4b3p0914sdh8mxdi9x2dwhm-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/ns834q5i8hgizx719zjlyx0f223l8pci-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/8firpgqk4260cy1fmp4icwjv4zwsv39x-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

ecdsa-0.14.8

/nix/store/zj8lnskpl5s9lnyym4xa04bdp7fmsvr2-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/4rzliqardkl299845js8xwy4p0l4w0bn-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

fuse-2.9.9

/nix/store/76nrfh6lnkh8xifzs0qaxvsz33bzpgir-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/8bw9b2xml0z4zc3zmjw0vij04ar0h6qp-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/zagshbijvwbn3a4isp8mazznxv3ygflw-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/74y9p0kqg4rjysvsr0jgz16hpkrhf8pz-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.46.1

/nix/store/czy3pmjrp7bnbbwz94fvk2hp0r2mxh27-git-2.46.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.2

/nix/store/k4sd1nf7nl549wcyx4z3g59sxd2h8xim-go-1.23.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

h2-0.3.26

/nix/store/f75707zav342p7pxbswmk84y3mdj2mxj-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/zy19si16rni042cpccvrfx88jglv25v0-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/sqdlgfdkc1r39azckqy0gzd9apazqmjd-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/ysm20mf78smqx661qjiik3y7b3b1pdmb-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/3wa633rps8d6gla5cyr4mkvbbwxm5ik9-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/kpbml71cbqz3p8mzmaak9nnqbcvc54d6-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/5g51wjh7l34w4f2x925xaad1vkm6zlrm-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/c9d3xlf7bnmx93qvpjxdk9a3i6gn01hi-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/m0a2xm98vxv8zq7k3bhyf2iqfzr45by7-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/ml5skxy6a08d8p5rv8abg9njcqyiyqy8-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

jbig2dec-0.20

/nix/store/yxk25j6sg78q42dckybfaxs4q9yk0mmd-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/hq22xf0h37hrdvmrlpcdvpny2znaaylg-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libarchive-3.7.4

/nix/store/hlhfpqmzi875xzqfx1lklfnlrl7xhs4f-libarchive-3.7.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-48957 7.8
https://nvd.nist.gov/vuln/detail/CVE-2024-48958 7.8

libmemcached-1.0.18

/nix/store/qcv0ixhd1pn0lx01grrncw9fw91y6vsg-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/gzd8c2xq4vwvw41wmhha5r4y8sfrsqbq-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/d0j9m64m7hq5pd9ygdgp2shkmnh06f9v-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5

lodepng-3.10.1

/nix/store/1psxb8pk01lvk8144jg4c2pjbq07r4dw-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/9pv5plcg55hln8ihsh4gchhj284sw9q6-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/i8c42fjnp4iq7bv744wb927l66khafmx-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/zbpghbzrhwbq89bg8pgbprqj2a7jxxmq-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openvpn-2.6.12

/nix/store/3mfw5g27imz93mn1j5q4j5sjm9pm4sf7-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/qk5y3z6gkgvj3f0z70q2iq2rb0wj5cyb-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/zc87v8bz5klzfmydrdkgyvrpb2z1b1ly-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

polkit-1.pam

/nix/store/vm4y3vwmxzby6whmal18q5xlxmrrajnw-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

procps-3.3.17-binlore

/nix/store/m278lwqr1nlzxsa8vappc9xr0gxz0cvh-procps-3.3.17-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4016 3.3

procps-3.3.17-lore-override

/nix/store/5y1kcn53dijbxm8wgsd0q3lgnhygcy8s-procps-3.3.17-lore-override.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4016 3.3

python-2.7.18.8

quinn-0.11.3

/nix/store/mkaprlz72mbl4mjx47wnalfgvw2w952n-quinn-0.11.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-45311 7.5

quote-1.0.36

/nix/store/63wg8qkjci3p9gscs8q3va84g0afbrc2-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/381dcj0ml8zviza1cqj86bybaazgjv4l-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.16

/nix/store/8hnma63g4j8kd4ri6dqnnr619d3gqzhi-rubygems-3.5.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/h9xik86lan9q8g7y8nsiv09n9x5vg7nq-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/19yy83rfd0ig41b2daw5jwqqw538gqiw-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.23

/nix/store/7mkn1zjf3z6zcnjqa99n67brlm0crfjw-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/hyj2k2g9iyp12jb821iw3405pxprjnm1-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

stringbuilder-0.5.1

/nix/store/l51qcida0zx4szlxxqngl840grllxwgf-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

unzip-6.0

/nix/store/60221dynwsrpksv8i8iinsr7y0f2a1gk-unzip-6.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4217 3.3

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/cp9q7jg4wy170xgazmsjdn3swyplx0kj-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/lh3ns42y2i3y2n2d831lrif005bqsf13-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/yrklisyhryhl2d7l8bxrkykz4gh8wqkz-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/j32bykgl9fnjg8zylskx4lcmb43i43fq-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/lh9z2jn6251lhvapac6sk2l8s07nlc2n-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/ksb4r1bqanp3sl4vq1ichhymk3midhgv-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/lr4n9c839lxrr30c8jz8bf2931izx5ml-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/8nccy426s4cy3q74n1z7q79gwhsa3r8r-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-11-01T00:56:09Z

Report for `roland`

Version changes:

Version 1 -> 2:
  desktop-grammar: ∅ → 0.0.0+rev=0d8b8cf, +27.6 KiB
  editorconfig-grammar: 0.0.0+rev=777f774 → 0.0.0+rev=38cf8d0
  elixir-grammar: 0.0.0+rev=2ac7a0f → 0.0.0+rev=5345854
  fortran-grammar: 0.0.0+rev=4a593dd → 0.0.0+rev=cb4cb11, +320.0 KiB
  fzf: 0.55.0 → 0.56.0
  javascript-grammar: 0.0.0+rev=c4ce9dc → 0.0.0+rev=a2ef079, -12.2 KiB
  just-grammar: 0.0.0+rev=6aee3d2 → 0.0.0+rev=1014d2f
  koto-grammar: 0.0.0+rev=cbf637e → 0.0.0+rev=9e5ab09, +2320.3 KiB
  less: -27.4 KiB
  lowdown: 1.1.2 → 1.2.0
  mlir-grammar: 0.0.0+rev=0238b7f → 0.0.0+rev=8cde51a
  nix: +100.6 KiB
  nixos-configuration-reference: +8.9 KiB
  nixos-manual: +26.2 KiB
  nixos-system-roland: 24.11.20241025.18536bf → 24.11.20241029.807e915
  nsncd: 1.4.1-unstable-2024-10-03 → 1.5.1, +33.1 KiB
  source: +466.2 KiB
  superhtml-grammar: 0.0.0+rev=3325bbb → 0.0.0+rev=e561df3
  swift-grammar: 0.0.0+rev=d351cb3 → 0.0.0+rev=5098007
  t32-grammar: 0.0.0+rev=0f6a5b1 → 0.0.0+rev=e455373
  templ-grammar: 0.0.0+rev=4519e3e → 0.0.0+rev=1dcd7db
  tlaplus-grammar: 0.0.0+rev=8a8413f → 0.0.0+rev=ffb6c4b
  vimdoc-grammar: 0.0.0+rev=59c5392 → 0.0.0+rev=d2e4b5c
  vimplugin-nvim-lspconfig: 2024-10-23 → 2024-10-28, +10.1 KiB
  vimplugin-nvim-treesitter: 2024-10-23 → 2024-10-28

Security vulnerability report

70 derivations with active advisories 4 derivations left out due to whitelisting

audiofile-0.3.6

/nix/store/84k0f925hjy6h6imspq8bj7clnfqn6cz-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/wp2g0fj70id9qgdiwvsc17zrz42p7b2r-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/p5r9lbjkwh3f81zd1d6hq3cbl8iykbg8-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/8ygvapcm50v0n3hyk21k1zm0jg90p4n0-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6

/nix/store/qfp7p9lpfcpc8nb1ipz474pdsb786dcg-commonmark-0.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

dash-0.5.12

/nix/store/hin7grimy4b3p0914sdh8mxdi9x2dwhm-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/ns834q5i8hgizx719zjlyx0f223l8pci-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/kvbna709ibfqp0ca7ig1znqqnqdrrmp5-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

ecdsa-0.14.8

/nix/store/zj8lnskpl5s9lnyym4xa04bdp7fmsvr2-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/4rzliqardkl299845js8xwy4p0l4w0bn-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

fuse-2.9.9

/nix/store/76nrfh6lnkh8xifzs0qaxvsz33bzpgir-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/8bw9b2xml0z4zc3zmjw0vij04ar0h6qp-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/zagshbijvwbn3a4isp8mazznxv3ygflw-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/74y9p0kqg4rjysvsr0jgz16hpkrhf8pz-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.46.1

/nix/store/czy3pmjrp7bnbbwz94fvk2hp0r2mxh27-git-2.46.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.2

/nix/store/k4sd1nf7nl549wcyx4z3g59sxd2h8xim-go-1.23.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

h2-0.3.26

/nix/store/f75707zav342p7pxbswmk84y3mdj2mxj-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/zy19si16rni042cpccvrfx88jglv25v0-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/sqdlgfdkc1r39azckqy0gzd9apazqmjd-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/ysm20mf78smqx661qjiik3y7b3b1pdmb-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/3wa633rps8d6gla5cyr4mkvbbwxm5ik9-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/kpbml71cbqz3p8mzmaak9nnqbcvc54d6-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/5g51wjh7l34w4f2x925xaad1vkm6zlrm-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/c9d3xlf7bnmx93qvpjxdk9a3i6gn01hi-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/m0a2xm98vxv8zq7k3bhyf2iqfzr45by7-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/ml5skxy6a08d8p5rv8abg9njcqyiyqy8-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

jbig2dec-0.20

/nix/store/yxk25j6sg78q42dckybfaxs4q9yk0mmd-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/hq22xf0h37hrdvmrlpcdvpny2znaaylg-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libarchive-3.7.4

/nix/store/hlhfpqmzi875xzqfx1lklfnlrl7xhs4f-libarchive-3.7.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-48957 7.8
https://nvd.nist.gov/vuln/detail/CVE-2024-48958 7.8

libmemcached-1.0.18

/nix/store/qcv0ixhd1pn0lx01grrncw9fw91y6vsg-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/gzd8c2xq4vwvw41wmhha5r4y8sfrsqbq-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/d0j9m64m7hq5pd9ygdgp2shkmnh06f9v-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5

lodepng-3.10.1

/nix/store/1psxb8pk01lvk8144jg4c2pjbq07r4dw-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/9pv5plcg55hln8ihsh4gchhj284sw9q6-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/i8c42fjnp4iq7bv744wb927l66khafmx-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/zbpghbzrhwbq89bg8pgbprqj2a7jxxmq-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openvpn-2.6.12

/nix/store/3mfw5g27imz93mn1j5q4j5sjm9pm4sf7-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/qk5y3z6gkgvj3f0z70q2iq2rb0wj5cyb-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/zc87v8bz5klzfmydrdkgyvrpb2z1b1ly-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

polkit-1.pam

/nix/store/vm4y3vwmxzby6whmal18q5xlxmrrajnw-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

procps-3.3.17-binlore

/nix/store/m278lwqr1nlzxsa8vappc9xr0gxz0cvh-procps-3.3.17-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4016 3.3

procps-3.3.17-lore-override

/nix/store/5y1kcn53dijbxm8wgsd0q3lgnhygcy8s-procps-3.3.17-lore-override.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4016 3.3

python-2.7.18.8

quinn-0.11.3

/nix/store/mkaprlz72mbl4mjx47wnalfgvw2w952n-quinn-0.11.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-45311 7.5

quote-1.0.36

/nix/store/63wg8qkjci3p9gscs8q3va84g0afbrc2-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/381dcj0ml8zviza1cqj86bybaazgjv4l-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.16

/nix/store/8hnma63g4j8kd4ri6dqnnr619d3gqzhi-rubygems-3.5.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/h9xik86lan9q8g7y8nsiv09n9x5vg7nq-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/19yy83rfd0ig41b2daw5jwqqw538gqiw-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.23

/nix/store/7mkn1zjf3z6zcnjqa99n67brlm0crfjw-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/hyj2k2g9iyp12jb821iw3405pxprjnm1-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

stringbuilder-0.5.1

/nix/store/l51qcida0zx4szlxxqngl840grllxwgf-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

unzip-6.0

/nix/store/60221dynwsrpksv8i8iinsr7y0f2a1gk-unzip-6.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4217 3.3

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/cp9q7jg4wy170xgazmsjdn3swyplx0kj-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/lh3ns42y2i3y2n2d831lrif005bqsf13-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/yrklisyhryhl2d7l8bxrkykz4gh8wqkz-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/j32bykgl9fnjg8zylskx4lcmb43i43fq-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/lh9z2jn6251lhvapac6sk2l8s07nlc2n-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/ksb4r1bqanp3sl4vq1ichhymk3midhgv-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/lr4n9c839lxrr30c8jz8bf2931izx5ml-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/8nccy426s4cy3q74n1z7q79gwhsa3r8r-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-11-01T00:56:46Z

Report for `vic`

Version changes:

Version 1 -> 2:
  alacritty-theme: 0-unstable-2024-09-27 → 0-unstable-2024-10-24
  desktop-grammar: ∅ → 0.0.0+rev=0d8b8cf, +27.6 KiB
  editorconfig-grammar: 0.0.0+rev=777f774 → 0.0.0+rev=38cf8d0
  elixir-grammar: 0.0.0+rev=2ac7a0f → 0.0.0+rev=5345854
  fortran-grammar: 0.0.0+rev=4a593dd → 0.0.0+rev=cb4cb11, +320.0 KiB
  fzf: 0.55.0 → 0.56.0
  javascript-grammar: 0.0.0+rev=c4ce9dc → 0.0.0+rev=a2ef079, -12.2 KiB
  just-grammar: 0.0.0+rev=6aee3d2 → 0.0.0+rev=1014d2f
  koto-grammar: 0.0.0+rev=cbf637e → 0.0.0+rev=9e5ab09, +2320.3 KiB
  less: -27.4 KiB
  lowdown: 1.1.2 → 1.2.0
  mlir-grammar: 0.0.0+rev=0238b7f → 0.0.0+rev=8cde51a
  nix: +100.6 KiB
  nixos-configuration-reference: +8.9 KiB
  nixos-manual: +26.2 KiB
  nixos-system-vic: 24.11.20241025.18536bf → 24.11.20241029.807e915
  nsncd: 1.4.1-unstable-2024-10-03 → 1.5.1, +33.1 KiB
  source: +466.2 KiB
  superhtml-grammar: 0.0.0+rev=3325bbb → 0.0.0+rev=e561df3
  swift-grammar: 0.0.0+rev=d351cb3 → 0.0.0+rev=5098007
  t32-grammar: 0.0.0+rev=0f6a5b1 → 0.0.0+rev=e455373
  templ-grammar: 0.0.0+rev=4519e3e → 0.0.0+rev=1dcd7db
  tlaplus-grammar: 0.0.0+rev=8a8413f → 0.0.0+rev=ffb6c4b
  vimdoc-grammar: 0.0.0+rev=59c5392 → 0.0.0+rev=d2e4b5c
  vimplugin-nvim-lspconfig: 2024-10-23 → 2024-10-28, +10.1 KiB
  vimplugin-nvim-treesitter: 2024-10-23 → 2024-10-28

Security vulnerability report

82 derivations with active advisories 4 derivations left out due to whitelisting

accountsservice-23.13.9

/nix/store/fcm4h30l71cs2p8xw2rzkjclp23mgda3-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 7.8

audiofile-0.3.6

/nix/store/84k0f925hjy6h6imspq8bj7clnfqn6cz-audiofile-0.3.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5

avahi-0.8

/nix/store/wp2g0fj70id9qgdiwvsc17zrz42p7b2r-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8

bind-9.18.28

/nix/store/p5r9lbjkwh3f81zd1d6hq3cbl8iykbg8-bind-9.18.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6470 7.5

cereal-0.5.8.3

/nix/store/8ygvapcm50v0n3hyk21k1zm0jg90p4n0-cereal-0.5.8.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3

commonmark-0.2.6

/nix/store/qfp7p9lpfcpc8nb1ipz474pdsb786dcg-commonmark-0.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1

console-0.15.8

/nix/store/dvzc8gfh4zjnrh6dxr2yfr0qzhys453a-console-0.15.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-33955 5.3

dash-0.5.12

/nix/store/hin7grimy4b3p0914sdh8mxdi9x2dwhm-dash-0.5.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 5.4

dbus-0.9.7

/nix/store/ns834q5i8hgizx719zjlyx0f223l8pci-dbus-0.9.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/8qj1378ad47bq4mynakkcsrm82qv1h9l-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-12749 7.1
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

djvulibre-3.5.28

/nix/store/zsdshh9fz78yj5r0j5lqgq9iaddqfzmp-djvulibre-3.5.28.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-46310 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-46312 6.5

ecdsa-0.14.8

/nix/store/zj8lnskpl5s9lnyym4xa04bdp7fmsvr2-ecdsa-0.14.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23342 7.4

flex-2.6.4

/nix/store/4rzliqardkl299845js8xwy4p0l4w0bn-flex-2.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6293 5.5

fuse-2.9.9

/nix/store/76nrfh6lnkh8xifzs0qaxvsz33bzpgir-fuse-2.9.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/8bw9b2xml0z4zc3zmjw0vij04ar0h6qp-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

fuse-3.16.2

/nix/store/zagshbijvwbn3a4isp8mazznxv3ygflw-fuse-3.16.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5
https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5

gcc-13.3.0

/nix/store/vzv96nlrv0bb57l3gcgqc63dkyrjdgvz-gcc-13.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

git-2.46.1

/nix/store/czy3pmjrp7bnbbwz94fvk2hp0r2mxh27-git-2.46.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3
https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3

go-1.21.0-linux-amd64-bootstrap

go-1.23.2

/nix/store/k4sd1nf7nl549wcyx4z3g59sxd2h8xim-go-1.23.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8

h2-0.3.26

/nix/store/f75707zav342p7pxbswmk84y3mdj2mxj-h2-0.3.26.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

h2-0.4.6

/nix/store/zy19si16rni042cpccvrfx88jglv25v0-h2-0.4.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-45868 7.8

hedgehog-1.4

/nix/store/sqdlgfdkc1r39azckqy0gzd9apazqmjd-hedgehog-1.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

hedgehog-1.4-r8.cabal

/nix/store/ysm20mf78smqx661qjiik3y7b3b1pdmb-hedgehog-1.4-r8.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8

home-0.5.9

/nix/store/3wa633rps8d6gla5cyr4mkvbbwxm5ik9-home-0.5.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3612 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-25264 6.7

http-0.2.12

/nix/store/kpbml71cbqz3p8mzmaak9nnqbcvc54d6-http-0.2.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-35669 6.1

http-1.1.0

/nix/store/5g51wjh7l34w4f2x925xaad1vkm6zlrm-http-1.1.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36032 5.3
https://nvd.nist.gov/vuln/detail/CVE-2023-26044 5.3

http-client-0.7.17

/nix/store/c9d3xlf7bnmx93qvpjxdk9a3i6gn01hi-http-client-0.7.17.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5

hyper-0.14.30

/nix/store/m0a2xm98vxv8zq7k3bhyf2iqfzr45by7-hyper-0.14.30.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

hyper-1.4.1

/nix/store/ml5skxy6a08d8p5rv8abg9njcqyiyqy8-hyper-1.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-23741 9.8

imagemagick-7.1.1-39

/nix/store/f7f5ia2a65md1cclaaz3jycjhyp9g6wf-imagemagick-7.1.1-39.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5341 5.5

jbig2dec-0.20

/nix/store/yxk25j6sg78q42dckybfaxs4q9yk0mmd-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

lapack-3

/nix/store/hq22xf0h37hrdvmrlpcdvpny2znaaylg-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libarchive-3.7.4

/nix/store/hlhfpqmzi875xzqfx1lklfnlrl7xhs4f-libarchive-3.7.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-48957 7.8
https://nvd.nist.gov/vuln/detail/CVE-2024-48958 7.8

libmemcached-1.0.18

/nix/store/qcv0ixhd1pn0lx01grrncw9fw91y6vsg-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmpeg2-0.5.1

/nix/store/gzd8c2xq4vwvw41wmhha5r4y8sfrsqbq-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libsndfile-1.2.2

/nix/store/d0j9m64m7hq5pd9ygdgp2shkmnh06f9v-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5

lodepng-3.10.1

/nix/store/1psxb8pk01lvk8144jg4c2pjbq07r4dw-lodepng-3.10.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5

lua-5.2.4

/nix/store/m064y3fkr105azv4bks6a69p33yr1rbn-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

mercurial-6.8.1

/nix/store/yjbi5pm7m0yzxskzq42ias90bzc2z2b3-mercurial-6.8.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

network-3.1.4.0

network-3.1.4.0-r1.cabal

ninja-1.12.1

/nix/store/9pv5plcg55hln8ihsh4gchhj284sw9q6-ninja-1.12.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8

numpy-0.21.0

/nix/store/i8c42fjnp4iq7bv744wb927l66khafmx-numpy-0.21.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-6446 9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-41496 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34141 5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-41495 5.3

oh-my-zsh-2024-10-01

/nix/store/zbpghbzrhwbq89bg8pgbprqj2a7jxxmq-oh-my-zsh-2024-10-01.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8

openexr-2.5.10

/nix/store/3jsvpwsp7j8841hxqz9rh0yp74kfj5sv-openexr-2.5.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5841 9.1
https://nvd.nist.gov/vuln/detail/CVE-2021-23169 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-3598 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-3605 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-23215 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-26260 5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-26945 5.5

openvpn-2.6.12

/nix/store/3mfw5g27imz93mn1j5q4j5sjm9pm4sf7-openvpn-2.6.12.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5

patch-2.7.6

/nix/store/snf2sfqg5kil84k8lqg9409xf6iymr2y-patch-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-20633 5.5

pip-20.3.4-source

/nix/store/zc87v8bz5klzfmydrdkgyvrpb2z1b1ly-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3

plasma-workspace-5.27.11.1

/nix/store/vylncj1arrcfamkq6lwlk113dwl420y6-plasma-workspace-5.27.11.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-1433 3.7

polkit-1.pam

/nix/store/si0hiqbl9g3mandma33dzf00qdph4s3f-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

procps-3.3.17-binlore

/nix/store/m278lwqr1nlzxsa8vappc9xr0gxz0cvh-procps-3.3.17-binlore.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4016 3.3

procps-3.3.17-lore-override

/nix/store/5y1kcn53dijbxm8wgsd0q3lgnhygcy8s-procps-3.3.17-lore-override.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4016 3.3

python-2.7.18.8

quinn-0.11.3

/nix/store/mkaprlz72mbl4mjx47wnalfgvw2w952n-quinn-0.11.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-45311 7.5

quote-1.0.35

/nix/store/vkzvyp3yrmls5wi0vcna3rdkqqrn5naz-quote-1.0.35.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.36

/nix/store/63wg8qkjci3p9gscs8q3va84g0afbrc2-quote-1.0.36.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

quote-1.0.37

/nix/store/381dcj0ml8zviza1cqj86bybaazgjv4l-quote-1.0.37.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3

rubygems-3.5.16

/nix/store/8hnma63g4j8kd4ri6dqnnr619d3gqzhi-rubygems-3.5.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8

safe-0.3.21

safe-0.3.21-r1.cabal

samba-4.20.4

/nix/store/h9xik86lan9q8g7y8nsiv09n9x5vg7nq-samba-4.20.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1
https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2
https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5

sassc-3.6.2

/nix/store/19yy83rfd0ig41b2daw5jwqqw538gqiw-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

semver-1.0.22

/nix/store/a7vgggk94a9n21hklgqyfycnbv3nj2gq-semver-1.0.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

semver-1.0.23

/nix/store/7mkn1zjf3z6zcnjqa99n67brlm0crfjw-semver-1.0.23.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-25883 7.5

setuptools-44.0.0-source

/nix/store/hyj2k2g9iyp12jb821iw3405pxprjnm1-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

snappy-1.2.1

/nix/store/w741x4hva9kvmqchpmmham6bs42x9f2k-snappy-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

stringbuilder-0.5.1

/nix/store/l51qcida0zx4szlxxqngl840grllxwgf-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 9.1

tap-1.0.1

/nix/store/6gczjp4kfs07mhi2nx4szwry3lyha535-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

unzip-6.0

/nix/store/60221dynwsrpksv8i8iinsr7y0f2a1gk-unzip-6.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4217 3.3

vault-0.3.1.5

vault-0.3.1.5-r8.cabal

warp-3.3.31

wheel-0.37.1-source

/nix/store/cp9q7jg4wy170xgazmsjdn3swyplx0kj-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

xdg-utils-1.2.1

/nix/store/lh3ns42y2i3y2n2d831lrif005bqsf13-xdg-utils-1.2.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5

yaml-0.11.11.2

/nix/store/yrklisyhryhl2d7l8bxrkykz4gh8wqkz-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/j32bykgl9fnjg8zylskx4lcmb43i43fq-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yara-4.5.0

/nix/store/lh9z2jn6251lhvapac6sk2l8s07nlc2n-yara-4.5.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5

yasm-1.3.0

zlib-0.6.3.0

/nix/store/ksb4r1bqanp3sl4vq1ichhymk3midhgv-zlib-0.6.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-0.6.3.0-r5.cabal

/nix/store/lr4n9c839lxrr30c8jz8bf2931izx5ml-zlib-0.6.3.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

zlib-1.3.1

/nix/store/kbkhyabgg7gvv2r22dyws3nrg0k63nyd-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions · 2024-11-01T00:56:53Z

Report for `elmira`

Version changes:

Version 1 -> 2:'
'  alacritty-theme: 0-unstable-2024-09-27 → 0-unstable-2024-10-24'
'  darwin-system: 24.11.20241025.18536bf+darwin4.b379bd4 → 24.11.20241029.807e915+darwin4.8dbda10'
'  desktop-grammar: ∅ → 0.0.0+rev=0d8b8cf, +37.2 KiB'
'  editorconfig-grammar: 0.0.0+rev=777f774 → 0.0.0+rev=38cf8d0'
'  elixir-grammar: 0.0.0+rev=2ac7a0f → 0.0.0+rev=5345854'
'  fortran-grammar: 0.0.0+rev=4a593dd → 0.0.0+rev=cb4cb11, +322.5 KiB'
'  fzf: 0.55.0 → 0.56.0, +16.3 KiB'
'  javascript-grammar: 0.0.0+rev=c4ce9dc → 0.0.0+rev=a2ef079, -32.5 KiB'
'  just-grammar: 0.0.0+rev=6aee3d2 → 0.0.0+rev=1014d2f'
'  koto-grammar: 0.0.0+rev=cbf637e → 0.0.0+rev=9e5ab09, +2322.0 KiB'
'  less: -22.3 KiB'
'  lowdown: 1.1.2 → 1.2.0'
'  mlir-grammar: 0.0.0+rev=0238b7f → 0.0.0+rev=8cde51a'
'  nix: +35.7 KiB'
'  source: +466.2 KiB'
'  superhtml-grammar: 0.0.0+rev=3325bbb → 0.0.0+rev=e561df3'
'  swift-grammar: 0.0.0+rev=d351cb3 → 0.0.0+rev=5098007'
'  system: +14.7 KiB'
'  t32-grammar: 0.0.0+rev=0f6a5b1 → 0.0.0+rev=e455373'
'  templ-grammar: 0.0.0+rev=4519e3e → 0.0.0+rev=1dcd7db'
'  tlaplus-grammar: 0.0.0+rev=8a8413f → 0.0.0+rev=ffb6c4b'
'  vimdoc-grammar: 0.0.0+rev=59c5392 → 0.0.0+rev=d2e4b5c'
'  vimplugin-nvim-lspconfig: 2024-10-23 → 2024-10-28, +10.1 KiB'
'  vimplugin-nvim-treesitter: 2024-10-23 → 2024-10-28

Security vulnerability report

52 derivations with active advisories'
'3 derivations left out due to whitelisting'
''
'------------------------------------------------------------------------'
'cereal-0.5.8.3'
''
'/nix/store/5lg735jw66zwl9m1ib39l21h11bbbpd7-cereal-0.5.8.3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11105    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11104    5.3'
''
'------------------------------------------------------------------------'
'commonmark-0.2.6'
''
'/nix/store/zl0y1m8ayshmflghz5fh87pgyxii0ca0-commonmark-0.2.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-10010    6.1'
''
'------------------------------------------------------------------------'
'dash-0.5.12'
''
'/nix/store/yh3alv2fzanc8bkksxfl04v9b0f4lhwl-dash-0.5.12.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-21485    5.4'
''
'------------------------------------------------------------------------'
'ecdsa-0.14.8'
''
'/nix/store/2hl3pf9x6c29cm8j6bzy4m09j6va8fkg-ecdsa-0.14.8.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23342    7.4'
''
'------------------------------------------------------------------------'
'flex-2.6.4'
''
'/nix/store/wbfwjl9jd689vqb8mlq8kvzw99kcpjh6-flex-2.6.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-6293     5.5'
''
'------------------------------------------------------------------------'
'gcc-13.3.0'
''
'/nix/store/2b324vlp6qc6zc35igqaka45lx6h7634-gcc-13.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-4039     4.8'
''
'------------------------------------------------------------------------'
'git-2.46.1'
''
'/nix/store/0g4hb5f0s29s9vyaw8d5k683xay14h5m-git-2.46.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36882    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-30947    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36883    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38663    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-21684    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-2136     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36884    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-1003010  4.3'
''
'------------------------------------------------------------------------'
'go-1.21.0-darwin-arm64-bootstrap'
''
'/nix/store/5bvd768w22rhmkx1x70lbv9gzfiyj1rh-go-1.21.0-darwin-arm64-bootstrap.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39320    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2024-24790    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39323    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39321    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39322    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39325    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-44487    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39318    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2023-39319    6.1'
'https://nvd.nist.gov/vuln/detail/CVE-2024-24789    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-49292    4.8'
''
'------------------------------------------------------------------------'
'go-1.23.2'
''
'/nix/store/m82cyrgfqssf9aqfas6nhlrppiw21yhl-go-1.23.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-49292    4.8'
''
'------------------------------------------------------------------------'
'h2-0.3.26'
''
'/nix/store/lxhcwnfr3dfpg7i546q9bf6szmkp388z-h2-0.3.26.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-45868    7.8'
''
'------------------------------------------------------------------------'
'h2-0.4.6'
''
'/nix/store/zbxs53y2j3x61ppm7x3fj9bcx591gwb9-h2-0.4.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-45868    7.8'
''
'------------------------------------------------------------------------'
'hedgehog-1.4'
''
'/nix/store/nzl00d4rklsbqjsihc1d3y22xddaqqsc-hedgehog-1.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4276     8.8'
''
'------------------------------------------------------------------------'
'hedgehog-1.4-r8.cabal'
''
'/nix/store/nhv97x1yfc43669iqm7aq6gg4hs37rfb-hedgehog-1.4-r8.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4276     8.8'
''
'------------------------------------------------------------------------'
'home-0.5.9'
''
'/nix/store/jwrqmncs6ccyn1wy7ja8pham062w84j6-home-0.5.9.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-3612     8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-25264    6.7'
''
'------------------------------------------------------------------------'
'http-0.2.12'
''
'/nix/store/1jil65gf44ihkggqxqmm38wzks3mvzx3-http-0.2.12.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-35669    6.1'
''
'------------------------------------------------------------------------'
'http-1.1.0'
''
'/nix/store/98kjivwyak711iynja42b27yihx5mjmp-http-1.1.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36032    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-26044    5.3'
''
'------------------------------------------------------------------------'
'http-client-0.7.17'
''
'/nix/store/ygrqgl1zk8angsa00ckcs8q38fjf4y94-http-client-0.7.17.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5'
''
'------------------------------------------------------------------------'
'hyper-0.14.30'
''
'/nix/store/j8762lv021kr92b4dbzfsga487mdmv00-hyper-0.14.30.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23741    9.8'
''
'------------------------------------------------------------------------'
'hyper-1.4.1'
''
'/nix/store/8xqv7xfwjanjsi1qqdmycn5n04mp1w2b-hyper-1.4.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-23741    9.8'
''
'------------------------------------------------------------------------'
'indent-2.2.13'
''
'/nix/store/20q8vzm1ppb4sg1j7xq6h6j5bbjy80jy-indent-2.2.13.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-0911     5.5'
''
'------------------------------------------------------------------------'
'jbig2dec-0.20'
''
'/nix/store/7g9iaw4c2fmf0pb4qydgy9726sfxy6wc-jbig2dec-0.20.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-46361    6.5'
''
'------------------------------------------------------------------------'
'lapack-3'
''
'/nix/store/1cpqi3lz1g6sxx9q3pc1jmhrsx3zircl-lapack-3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4048     9.1'
''
'------------------------------------------------------------------------'
'libarchive-3.7.4'
''
'/nix/store/v5zqkkagvy1d5a1j7nhg9z3liyxmwjb3-libarchive-3.7.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-48957    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2024-48958    7.8'
''
'------------------------------------------------------------------------'
'libmemcached-1.0.18'
''
'/nix/store/apqgisnd7ghqh8i51x230zv3lai2pskl-libmemcached-1.0.18.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-27478    6.5'
''
'------------------------------------------------------------------------'
'lodepng-3.10.1'
''
'/nix/store/hqb02w25b52swyr977kb9j98yp2scq33-lodepng-3.10.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-17178    7.5'
''
'------------------------------------------------------------------------'
'lua-5.2.4'
''
'/nix/store/5c3q3677s72yd2chfw95cms76sx51r8b-lua-5.2.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-43519    5.5'
''
'------------------------------------------------------------------------'
'network-3.1.4.0'
''
'/nix/store/rii9r7v5b2azzbxd8p62l950dmn0pcrl-network-3.1.4.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24388    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24389    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24390    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24391    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24392    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24393    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24394    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0486     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0997     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5'
''
'------------------------------------------------------------------------'
'network-3.1.4.0-r1.cabal'
''
'/nix/store/c7c80kp8s1h2y0jpa8zvh04ibkzjmaq2-network-3.1.4.0-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24388    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24389    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24390    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24391    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24392    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24393    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24394    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0486     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-0997     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5'
''
'------------------------------------------------------------------------'
'ninja-1.12.1'
''
'/nix/store/7pb54vz18qy64dsy0pvyv7yy6pzr24p4-ninja-1.12.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4336     9.8'
''
'------------------------------------------------------------------------'
'numpy-0.21.0'
''
'/nix/store/h6vjmj5lk9s2rhcjzcfa90c2vx3chac4-numpy-0.21.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-6446     9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41496    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-34141    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41495    5.3'
''
'------------------------------------------------------------------------'
'oh-my-zsh-2024-10-01'
''
'/nix/store/07nkaryf1l6hh48arhg1d8xclilhcx56-oh-my-zsh-2024-10-01.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3727     9.8'
''
'------------------------------------------------------------------------'
'openmp-16.0.6'
''
'/nix/store/3am236h0k3d2pn96jyj6j3vjwa62q4kr-openmp-16.0.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-26345    7.3'
''
'------------------------------------------------------------------------'
'patch-2.7.6'
''
'/nix/store/vbgbbygpvvrvsskrywlxvg849cjzgvwp-patch-2.7.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-20633    5.5'
''
'------------------------------------------------------------------------'
'quinn-0.11.3'
''
'/nix/store/p6pkkk0703bdzp74pi6ixxswbmrs8q9z-quinn-0.11.3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-45311    7.5'
''
'------------------------------------------------------------------------'
'quote-1.0.36'
''
'/nix/store/1540f7pb2pjm3290fy4kk73hpppmk1rm-quote-1.0.36.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3'
''
'------------------------------------------------------------------------'
'quote-1.0.37'
''
'/nix/store/gb1zl3g1qc3s91fbffqfx3n8hga59pqy-quote-1.0.37.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3'
''
'------------------------------------------------------------------------'
'rubygems-3.5.16'
''
'/nix/store/zfmmxavxhbc24l5g9hymv4m74jgkg3ms-rubygems-3.5.16.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-36073    8.8'
''
'------------------------------------------------------------------------'
'safe-0.3.21'
''
'/nix/store/3da6avydnz0c9g3899mkk60yj8daqsj4-safe-0.3.21.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28872    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38164    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-47524    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28868    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28869    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28870    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28873    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38163    3.5'
''
'------------------------------------------------------------------------'
'safe-0.3.21-r1.cabal'
''
'/nix/store/fypd41ccws7r7p60m9x3plnxy8fpzsc1-safe-0.3.21-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28872    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38164    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-47524    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28868    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28869    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28870    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28873    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-38163    3.5'
''
'------------------------------------------------------------------------'
'semver-1.0.23'
''
'/nix/store/3pzyjd9gd38kq0iiadlnng2gfw4r52pg-semver-1.0.23.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-25883    7.5'
''
'------------------------------------------------------------------------'
'stringbuilder-0.5.1'
''
'/nix/store/bxp3xwmnd25niyvmly3jmy961v1ymdvw-stringbuilder-0.5.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2024-21524    9.1'
''
'------------------------------------------------------------------------'
'subversion-1.14.4'
''
'/nix/store/cvrbixf14gg9pcm7zain3m5qki2h20hw-subversion-1.14.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-21698    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2020-2304     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2020-2111     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2022-29046    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2022-29048    4.3'
''
'------------------------------------------------------------------------'
'unzip-6.0'
''
'/nix/store/117sjx7s851rz1dvzs8x4gjn1yv60chd-unzip-6.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4217     3.3'
''
'------------------------------------------------------------------------'
'vault-0.3.1.5'
''
'/nix/store/prkrr37iqmndssy5l5rk6y0cy3bd8h97-vault-0.3.1.5.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-24999    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6337     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0620     6.7'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0665     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2024-8365     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2121     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-41316    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-25000    4.7'
''
'------------------------------------------------------------------------'
'vault-0.3.1.5-r8.cabal'
''
'/nix/store/xa35hlwa4j4dy2b572dnnp5qzd1mb2l9-vault-0.3.1.5-r8.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-24999    8.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6337     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0620     6.7'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0665     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2024-8365     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2121     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-41316    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-25000    4.7'
''
'------------------------------------------------------------------------'
'warp-3.3.31'
''
'/nix/store/31xn113fixlsmpw9k3ci1mr2yr0mrq8s-warp-3.3.31.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3320     9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3512     8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-4428     8.0'
'https://nvd.nist.gov/vuln/detail/CVE-2022-2145     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-2225     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0652     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-1412     7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-1862     7.3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-2754     6.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-4457     5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0238     5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-0654     3.7'
''
'------------------------------------------------------------------------'
'yaml-0.11.11.2'
''
'/nix/store/qqp6gb4m93q2ccr4qmh9p7wbkbxvh7jk-yaml-0.11.11.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3064     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4235     5.5'
''
'------------------------------------------------------------------------'
'yaml-0.11.11.2-r2.cabal'
''
'/nix/store/70z1gicvd5fh7vy6pcdhzrkm36q3280i-yaml-0.11.11.2-r2.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-3064     7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-4235     5.5'
''
'------------------------------------------------------------------------'
'yasm-1.3.0'
''
'/nix/store/fbpmcksxpwri1la352h530ghk7g13imp-yasm-1.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33454    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33455    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33456    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33457    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33458    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33459    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33460    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33461    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33462    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33463    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33464    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33465    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33466    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33467    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33468    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-30402    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31972    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31973    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31974    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-51258    5.5'
'https://nvd.nist.gov/vuln/detail/CVE-2023-31975    3.3'
''
'------------------------------------------------------------------------'
'zlib-0.6.3.0'
''
'/nix/store/0xvrks8fqgm205mwx4120svz1bnh827r-zlib-0.6.3.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37434    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-45853    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'------------------------------------------------------------------------'
'zlib-0.6.3.0-r5.cabal'
''
'/nix/store/j1q5sxw4lfdk5anj3rdxrysffcdqiwlv-zlib-0.6.3.0-r5.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-37434    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-45853    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'------------------------------------------------------------------------'
'zlib-1.3.1'
''
'/nix/store/cnh68a00aahdaxq0752snbl2fgpi9xd4-zlib-1.3.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2023-6992     5.5'
''
'use --show-whitelisted to see derivations with only whitelisted CVEs

chore(deps): lock file maintenance

1addb23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): lock file maintenance #122

chore(deps): lock file maintenance #122

renovate bot commented Nov 1, 2024

github-actions bot commented Nov 1, 2024

github-actions bot commented Nov 1, 2024

github-actions bot commented Nov 1, 2024

github-actions bot commented Nov 1, 2024

chore(deps): lock file maintenance #122

Are you sure you want to change the base?

chore(deps): lock file maintenance #122

Conversation

renovate bot commented Nov 1, 2024

Configuration

github-actions bot commented Nov 1, 2024

Report for marlon

github-actions bot commented Nov 1, 2024

Report for roland

github-actions bot commented Nov 1, 2024

Report for vic

github-actions bot commented Nov 1, 2024

Report for elmira

Report for `marlon`

Report for `roland`

Report for `vic`

Report for `elmira`