VendorsNixOShydraany version
Vulnerabilities

NixOS Hydra any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2024-45049
Nix Hydra Missing authentication when triggering evaluations
Published 2024-08-27 · Analyzed
7.5EPSS 0.006
CVE-2025-54864
Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins
Published 2025-08-12 · Analyzed
7.5EPSS 0.004
CVE-2025-54800
Hydra persistent XSS in build metrics
Published 2025-08-12 · Analyzed
7.1EPSS 0.002
CVE-2024-32657
Hydra has persistent XSS vulnerability serving HTML build outputs
Published 2024-04-22 · Analyzed
5.4EPSS 0.005
CVE-2025-32435
Hydra no restricted eval after nix-eval-jobs migration
Published 2025-04-15 · Analyzed
2.6EPSS 0.003