Issues

• Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder

  1.severity: security
  NixOS/nixpkgs#569371 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

  1.severity: security
  NixOS/nixpkgs#569370 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• Collectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instances

  1.severity: security
  NixOS/nixpkgs#569369 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• Confluent Kafka Python Improper TLS Certificate Validation

  1.severity: security
  NixOS/nixpkgs#569368 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• tnef: security issues =< 1.4.18

  1.severity: security
  NixOS/nixpkgs#569367 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• python3Packages.tornado: security issues < 6.5.9

  1.severity: security
  NixOS/nixpkgs#569366 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• CVE-2026-104056

  1.severity: security
  NixOS/nixpkgs#569364 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability

  1.severity: security
  NixOS/nixpkgs#569363 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point

  1.severity: security
  NixOS/nixpkgs#569362 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• youtrack: security issues < 2026.2.19422

  1.severity: security
  NixOS/nixpkgs#569361 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler

  1.severity: security
  NixOS/nixpkgs#569360 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive

  1.severity: security
  NixOS/nixpkgs#569359 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• KaTeX: Existing prototype pollution can bypass trust restrictions

  1.severity: security
  NixOS/nixpkgs#569358 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• Lektor 3.3.14 CSRF via Admin API Endpoints

  1.severity: security
  NixOS/nixpkgs#569357 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• perlPackages.Imager: security issues < 1.037

  1.severity: security
  NixOS/nixpkgs#569356 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• BlueALSA bluealsad LC3plus Decoder Division-by-Zero DoS

  1.severity: security
  NixOS/nixpkgs#569355 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• minimal iso doesn't appear to work in bhyve

  NixOS/nixpkgs#569320 · Filter by author jacques-ivy opened on Oct 2, 2026

• urllib3: CVE-2026-97687

  0.kind: bug
  NixOS/nixpkgs#569318 · Filter by author h0nIg opened on Oct 2, 2026

• pgvector buffer overflow in IVFFlat index build

  1.severity: security
  NixOS/nixpkgs#569315 · Filter by author nixpkgs-security-tracker opened on Oct 2, 2026

• nixos-rebuild-ng: passes unrecognized option '--output=cat' to systemd-run

  NixOS/nixpkgs#569311 · Filter by author chorongi opened on Oct 2, 2026

• breakpad

  0.kind: bug
  NixOS/nixpkgs#569271 · Filter by author mfine000 opened on Oct 2, 2026
  

• Build failure: grass

  0.kind: build failure
  NixOS/nixpkgs#569242 · Filter by author gregorywaynepower opened on Oct 2, 2026

• Build failure: gdbuspp

  0.kind: build failure
  NixOS/nixpkgs#569240 · Filter by author SohamG opened on Oct 2, 2026

• Coder team

  NixOS/nixpkgs#569224 · Filter by author pbsds opened on Oct 1, 2026
  3

• Build failure: clickhouse

  0.kind: build failure
  NixOS/nixpkgs#569202 · Filter by author imnotpoz opened on Oct 1, 2026