https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:42:10.567984+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-308539 EUVD-2026-308539 2026-10-03T09:42:10.635190+00:00 EUVD-2026-308539 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44029 fkie_cve-2026-44029 2026-10-03T09:42:10.635243+00:00

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);

 https://cve.radiocsirt.org/vuln/ghsa-54vc-ph3h-x39x GHSA-54vc-ph3h-x39x 2026-10-03T09:42:10.635278+00:00

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);

 https://cve.radiocsirt.org/vuln/rhsa-2026:10208 RHSA-2026:10208 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T09:42:10.635296+00:00

nix: coroutine stack-to-heap overflow via unbounded recursion in NAR directory parser nix: absolute path traversal when unpacking archives to disk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44029 UBUNTU-CVE-2026-44029 2026-10-03T09:42:10.635317+00:00

Affected: Ubuntu:Pro:22.04:LTS: nix, Ubuntu:Pro:24.04:LTS: nix, Ubuntu:25.10: nix, Ubuntu:26.04:LTS: nix

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);