https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:43:46.359182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07756 bdu:2025-07756 2026-10-04T03:43:46.363268+00:00 bdu:2025-07756 https://cve.radiocsirt.org/vuln/euvd-2026-246023 EUVD-2026-246023 2026-10-04T03:43:46.363306+00:00 EUVD-2026-246023 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52991 fkie_cve-2025-52991 2026-10-04T03:43:46.363334+00:00

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data manipulation. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.

 https://cve.radiocsirt.org/vuln/ghsa-8vh4-gppm-m3jm GHSA-8vh4-gppm-m3jm 2026-10-04T03:43:46.363368+00:00

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data manipulation. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15248-1 openSUSE-SU-2025:15248-1 — nix-2.29.1-1.1 on GA media 2026-10-04T03:43:46.363385+00:00

nix-2.29.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-52991 UBUNTU-CVE-2025-52991 2026-10-04T03:43:46.363403+00:00

Affected: Ubuntu:Pro:22.04:LTS: guix, Ubuntu:Pro:24.04:LTS: guix

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data manipulation. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.