Threat database

22 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.9	EPSS 0.2%	CVE-2025-46416Nix · Improper Ownership Management Low2.9EPSS 0.2%2025-06-27CVE Database V5CVE-2025-46416 The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account (e.g., nixbld or guixbuild). This affects Nix through 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix through 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b. EPSS 0.2%Vulnerability NixOS #cwe-282	CVE Database V5	2025-06-27
Low	3.2	EPSS 0.1%	CVE-2025-46415Nix · Time-of-check Time-of-use (TOCTOU) Race Condition Low3.2EPSS 0.1%2025-06-27CVE Database V5CVE-2025-46415 A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b. EPSS 0.1%Vulnerability NixOS #cwe-367	CVE Database V5	2025-06-27

Showing 21–22 of 22 results