Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-54vc-ph3h-x39x

Опубликовано: 05 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);

EPSS

Процентиль: 44%
0.00573
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-36

Связанные уязвимости

CVSS3: 5.3
ubuntu
3 месяца назад

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);

CVSS3: 7.1
redhat
3 месяца назад

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);

CVSS3: 5.3
nvd
3 месяца назад

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);

CVSS3: 5.3
debian
3 месяца назад

An issue was discovered in Nix before 2.34.7. Writing to arbitrary fil ...

EPSS

Процентиль: 44%
0.00573
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-36