https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:02:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-308539 EUVD-2026-308539 https://cve.radiocsirt.org/vuln/euvd-2026-308539 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44029 <p>An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via &#34;nix-prefetch-url --unpack&#34; or &#34;nix store prefetch-file --unpack&#34; directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);</p> <p>An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via &#34;nix-prefetch-url --unpack&#34; or &#34;nix store prefetch-file --unpack&#34; directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44029 https://cve.radiocsirt.org/vuln/ghsa-54vc-ph3h-x39x <p>An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via &#34;nix-prefetch-url --unpack&#34; or &#34;nix store prefetch-file --unpack&#34; directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);</p> <p>An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via &#34;nix-prefetch-url --unpack&#34; or &#34;nix store prefetch-file --unpack&#34; directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);</p> https://cve.radiocsirt.org/vuln/ghsa-54vc-ph3h-x39x https://cve.radiocsirt.org/vuln/rhsa-2026:10208 <p>nix: coroutine stack-to-heap overflow via unbounded recursion in NAR directory parser nix: absolute path traversal when unpacking archives to disk</p> <p>nix: coroutine stack-to-heap overflow via unbounded recursion in NAR directory parser nix: absolute path traversal when unpacking archives to disk</p> https://cve.radiocsirt.org/vuln/rhsa-2026:10208 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44029 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: nix, Ubuntu:Pro:24.04:LTS: nix, Ubuntu:25.10: nix, Ubuntu:26.04:LTS: nix</p> <p>An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via &#34;nix-prefetch-url --unpack&#34; or &#34;nix store prefetch-file --unpack&#34; directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: nix, Ubuntu:Pro:24.04:LTS: nix, Ubuntu:25.10: nix, Ubuntu:26.04:LTS: nix</p> <p>An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via &#34;nix-prefetch-url --unpack&#34; or &#34;nix store prefetch-file --unpack&#34; directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44029