NixOS / Hydra
5 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-54864 | Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins | MEDIUM | 6.9 | Aug 12, 2025 |
| CVE-2025-54800 | Hydra persistent XSS in build metrics | HIGH | 7.1 | Aug 12, 2025 |
| CVE-2025-32435 | Hydra no restricted eval after nix-eval-jobs migration | LOW | 2.6 | Apr 15, 2025 |
| CVE-2024-45049 | Nix Hydra Missing authentication when triggering evaluations | HIGH | 7.5 | Aug 27, 2024 |
| CVE-2024-32657 | Hydra has persistent XSS vulnerability serving HTML build outputs | MEDIUM | 5.4 | Apr 22, 2024 |
Showing 1 to 5 of 5 CVEs