chore(flake): Automatic flake update

EdenEast commented 2 years ago

Flake lock file changes:

Updated np: darwin ➡️ `` 'github:lnl7/nix-darwin/17fbc68a6110edbff67e55f7450230a697ecb17e' (2022-03-13) → 'github:lnl7/nix-darwin/4fdbb8168f61d31d3f90bb0d07f48de709c4fe79' (2022-03-26)
Updated np: fenix ➡️ `` 'github:nix-community/fenix/8881b72bbf95655ff2a41b8daea599a8b3dd6c92' (2022-03-19) → 'github:nix-community/fenix/5cbb7720dcbb684fd8375fdd915fb725a6c2178b' (2022-04-16)
Updated np: fenix/rust-analyzer-src ➡️ `` 'github:rust-analyzer/rust-analyzer/85311a862747e4d4857dd49493e1ef7b45de8be3' (2022-03-18) → 'github:rust-analyzer/rust-analyzer/1c22537b3b7012f76952546ef90b18509a056690' (2022-04-15)
Updated np: flake-compat ➡️ `` 'github:edolstra/flake-compat/b7547d3eed6f32d06102ead8991ec52ab0a4f1a7' (2022-01-03) → 'github:edolstra/flake-compat/64a525ee38886ab9028e6f61790de0832aa3ef03' (2022-03-25)
Updated np: home-manager ➡️ `` 'github:nix-community/home-manager/e96fc6d8f90c96320a9c7e6663b734ab50ec1794' (2022-03-19) → 'github:nix-community/home-manager/8ab155c61f5821ffda723de88b0009769771d4f2' (2022-04-16)
Updated np: neovim-nightly ➡️ `` 'github:nix-community/neovim-nightly-overlay/f812452dc54373d11280daddf2cf12874c860188' (2022-03-19) → 'github:nix-community/neovim-nightly-overlay/ae9ee8abdce8256822879916d386550bb55f5b6c' (2022-04-16)
Updated np: neovim-nightly/flake-compat ➡️ `` 'github:edolstra/flake-compat/b7547d3eed6f32d06102ead8991ec52ab0a4f1a7' (2022-01-03) → 'github:edolstra/flake-compat/64a525ee38886ab9028e6f61790de0832aa3ef03' (2022-03-25)
Updated np: neovim-nightly/neovim-flake ➡️ `` 'github:neovim/neovim/f2e5f509d995b291e4b9e05a0c059e83490a18e1?dir=contrib' (2022-03-18) → 'github:neovim/neovim/3f2e9298bdd971a4d2baa298aff7c6f2c2c1ad1a?dir=contrib' (2022-04-16)
Updated np: nixpkgs ➡️ `` 'github:nixos/nixpkgs/73ad5f9e147c0d2a2061f1d4bd91e05078dc0b58' (2022-03-14) → 'github:nixos/nixpkgs/75ad56bdc927f3a9f9e05e3c3614c4c1fcd99fcb' (2022-04-16)
Updated np: nur ➡️ `` 'github:nix-community/nur/29a57e5ffc9105cb37d96fffae22c378abab6b43' (2022-03-20) → 'github:nix-community/nur/46611c782718da8dcbe5e51dde286928084d5d3b' (2022-04-17)

github-actions[bot] commented 2 years ago

Report for `sloth`

Version changes:

Version 1 -> 2:
  NetworkManager-fortisslvpn-gnome: 1.2.10 → 1.4.0, +207.4 KiB
  NetworkManager-openconnect: ∅ → 1.2.8, +3112.2 KiB
  NetworkManager-openconnect-gnome: 1.2.6 → ∅, -2464.2 KiB
  NetworkManager-openvpn: ∅ → 1.8.18, +1631.7 KiB
  NetworkManager-openvpn-gnome: 1.8.16 → ∅, -1409.9 KiB
  NetworkManager-vpnc: ∅ → 1.2.8, +868.5 KiB
  NetworkManager-vpnc-gnome: 1.2.6 → ∅, -740.7 KiB
  SDL: ∅ → 1.2.15, +501.3 KiB
  SDL2: 2.0.14 → 2.0.20, +2325.2 KiB
  adwaita-icon-theme: 41.0 → 42.0, -6421.6 KiB
  alacritty: -43.2 KiB
  at-spi2-core: 2.42.0 → 2.44.0
  audit: +825.1 KiB
  awesome: -10.0 KiB
  aws-checksums: 0.1.11 → 0.1.12
  bash: 5.1-p12 → ∅, -1519.2 KiB
  bash-interactive: 5.1-p12 → 5.1-p16
  bat: +22.3 KiB
  bind: 9.18.0 → 9.18.1, +8.9 KiB
  binutils: -10.6 KiB
  bluez: 5.62 → 5.63
  bottom: +61.5 KiB
  btrfs-progs: 5.16 → 5.16.2
  cachix: +239.9 KiB
  cargo-stable: 2022-02-24 → 2022-04-07, +1328.3 KiB
  chromaprint: ∅ → 1.5.1, +159.0 KiB
  clang: 13.0.0 → 13.0.1, +179.5 KiB
  clang-tools: 13.0.0 → 13.0.1
  clang-wrapper: 13.0.0 → 13.0.1
  clippy-preview-stable: 2022-02-24 → 2022-04-07
  cmake: 3.22.2 → 3.22.3
  cmake-cursesUI: 3.22.2 → 3.22.3
  compiler-rt-libc: 13.0.0 → 13.0.1, +22.3 KiB
  cryptsetup: -904.8 KiB
  cups: 2.4.0 → 2.4.1
  curl: 7.81.0 → 7.82.0
  cyrus-sasl: 2.1.27 → 2.1.28
  dav1d: 0.9.2 → 1.0.0, +465.5 KiB
  dejavu-fonts: -249.2 KiB
  delta: -37.0 KiB
  dhcp: 4.4.2-P1 → ∅, -13165.0 KiB
  directfb: ∅ → 1.7.7, +7739.4 KiB
  direnv: 2.30.3 → 2.31.0
  dosfstools: 4.1 → 4.2, +252.1 KiB
  dotnet-sdk: 6.0.100 → 6.0.201, +5847.0 KiB
  dua: 2.17.0 → 2.17.1, -36.8 KiB
  e2fsprogs: -8.6 KiB
  ed: 1.17 → 1.18
  ell: 0.46 → 0.49
  eslint_d: 11.1.1 → 12.0.0, -3048.2 KiB
  etc-nixos-initrd.conf: ε → ∅
  ethtool: 5.15 → 5.16
  expat: 2.4.4 → 2.4.7
  extra: -74.3 KiB
  faad2: ∅ → 2.10.0, +613.0 KiB
  fd: -13.2 KiB
  ffmpeg: +24932.9 KiB
  findutils: 4.8.0 → 4.9.0, -150.9 KiB
  firefox: 97.0.2 → 99.0.1, +335.8 KiB
  firefox-unwrapped: 97.0.2 → 99.0.1, +8182.3 KiB
  flac: 1.3.3 → 1.3.4, +12.5 KiB
  flite: ∅ → 2.2, +62330.5 KiB
  fluidsynth: ∅ → 2.2.3, +686.3 KiB
  freepats: ∅ → 20060219, +32609.0 KiB
  fuse: -8.9 KiB
  fzf: 0.29.0 → 0.30.0, +8.3 KiB
  gcr: +18.6 KiB
  gdb: 11.1 → 11.2, -16.1 KiB
  gdbm: 1.20 → 1.23, +103.2 KiB
  gdk-pixbuf: 2.42.6 → 2.42.8
  getent-glibc: 2.33-108 → 2.34-115
  gh: 2.5.2 → 2.8.0, +320.0 KiB
  ghostscript: 9.55.0 → ∅, -45820.6 KiB
  ghostscript-with-X: ∅ → 9.55.0, +45820.4 KiB
  git: +36.7 KiB
  glib: 2.70.2 → 2.72.0, +180.5 KiB
  glib-networking: 2.70.1 → 2.72.0, +41.5 KiB
  glibc: 2.33-108 → ∅, -30227.1 KiB
  glibc-locales: 2.33-108 → 2.34-115
  glu: ∅ → 9.0.2, +463.1 KiB
  gmp: 6.2.1 → ∅, -1368.6 KiB
  gmp-with-cxx: ∅ → 6.2.1, +1368.7 KiB
  gnumake: -8.4 KiB
  gnupg: 2.3.3 → 2.3.4, +17.7 KiB
  gobject-introspection: 1.70.0 → 1.72.0, +20.8 KiB
  gpgme: 1.16.0 → 1.17.0, +16.4 KiB
  graphene: ∅ → 1.10.6, +1044.4 KiB
  groff: -19.5 KiB
  gsasl: 1.10.0 → ∅, -1097.9 KiB
  gsettings-desktop-schemas: 41.0 → 42.0, +32.8 KiB
  gsm: ∅ → 1.0.19, +212.5 KiB
  gss: 1.0.3 → ∅, -561.1 KiB
  gssdp: ∅ → 1.4.0.1, +119.0 KiB
  gst-plugins-bad: ∅ → 1.20.0, +12709.1 KiB
  gtk+3: 3.24.31 → 3.24.33
  gtk4: ∅ → 4.6.2, +35551.7 KiB
  guile: 2.2.7 → ∅, -44311.6 KiB
  gupnp: ∅ → 1.4.3, +319.3 KiB
  gupnp-igd: ∅ → 1.2.0, +51.6 KiB
  gzip: 1.11 → 1.12
  harfbuzz: 3.2.0 → 3.3.2, +30.1 KiB
  hdf5: ∅ → 1.12.1, +9055.4 KiB
  http-parser: ∅ → 2.9.4, +64.7 KiB
  hub: +8.2 KiB
  hwdb.bin: +177.5 KiB
  hyperfine: -48.2 KiB
  ilmbase: ∅ → 2.5.7, +1139.5 KiB
  initrd-linux: 5.15.28 → 5.15.34, +37.0 KiB
  interception-tools: -8.6 KiB
  just: 1.1.0 → 1.1.2, -41.0 KiB
  kbd: -28.0 KiB
  kmod: -25.1 KiB
  lab: +8.0 KiB
  lcms2: 2.12 → 2.13.1
  lf: 26 → 27, +36.6 KiB
  libaom: ∅ → 3.3.0, +7835.6 KiB
  libapparmor: 3.0.3 → 3.0.4
  libarchive: 3.5.2 → 3.6.0, +8.9 KiB
  libbs2b: ∅ → 3.1.0, +85.6 KiB
  libbsd: 0.11.3 → 0.11.5
  libcamera-unstable: +264.8 KiB
  libcap: 2.49 → 2.63, +41.0 KiB
  libcbor: 0.8.0 → 0.9.0
  libdc1394: ∅ → 2.2.6, +400.2 KiB
  libde265: ∅ → 1.0.8, +1280.9 KiB
  libdecor: ∅ → 0.1.0, +128.8 KiB
  libdrm: 2.4.109 → 2.4.110
  libdv: ∅ → 1.0.0, +227.4 KiB
  libdvdcss: ∅ → 1.4.3, +195.5 KiB
  libdvdnav: ∅ → 6.1.1, +177.1 KiB
  libdvdread: ∅ → 6.1.2, +329.3 KiB
  libfido2: 1.9.0 → 1.10.0, +11.2 KiB
  libftdi: +100.0 KiB
  libgit2: ∅ → 1.4.0, +2154.5 KiB
  libgme: ∅ → 0.6.3, +410.1 KiB
  libical: 3.0.11 → 3.0.14, +10.1 KiB
  libidn2: -254.7 KiB
  libinput: 1.19.3 → 1.20.0
  libjpeg-turbo: 2.1.2 → 2.1.3
  libkate: ∅ → 0.4.1, +2106.3 KiB
  libmicrodns: ∅ → 0.2.0, +42.8 KiB
  libmodplug: ∅ → 0.8.9.0, +407.5 KiB
  libnet: 1.2-rc3 → 1.2
  libnetfilter_conntrack: 1.0.8 → 1.0.9
  libnice: ∅ → 0.1.18, +450.1 KiB
  libnma: 1.8.34 → 1.8.38, +1690.6 KiB
  libopenmpt: ∅ → 0.5.11, +2035.7 KiB
  libqmi: 1.30.2 → 1.30.4
  libraw1394: ∅ → 2.1.2, +193.8 KiB
  libressl: 3.4.2 → 3.4.3
  librsvg: 2.52.5 → 2.54.0, +162.5 KiB
  libsecret: 0.20.4 → 0.20.5, +15.1 KiB
  libsoup: 3.0.4 → 3.0.5
  libsrtp: ∅ → 2.4.2, +93.8 KiB
  libunistring: -1596.1 KiB
  libusb: 1.0.24 → 1.0.25
  libuv: 1.43.0 → ∅, -335.3 KiB
  libva: 2.13.0 → 2.14.0, +8.2 KiB
  libwacom: 1.99.1 → 2.1.0, +8.7 KiB
  libxkbcommon: 1.3.1 → 1.4.0
  libxml2: 2.9.12 → 2.9.13
  libxslt: ∅ → 1.1.35, +544.9 KiB
  linux: 5.15.28, 5.15.28-modules → 5.15.34, 5.15.34-modules, +76.6 KiB
  lldb: 13.0.0 → 13.0.1
  llvm: 13.0.0 → 13.0.1, -23.5 KiB
  locale-glibc: 2.33-108 → 2.34-115
  lowdown: 0.10.0 → 0.11.1
  lrdf: ∅ → 0.6.1, +59.3 KiB
  luarocks: 3.2.1 → 3.8.0, +37.2 KiB
  lvm2: 2.03.14 → 2.03.15, -120.9 KiB
  lvm2-with-dmeventd: 2.03.14 → 2.03.15, -103.9 KiB
  mailutils: 3.14 → ∅, -11977.0 KiB
  man: -621.2 KiB
  man-db: 2.9.4 → 2.10.1, +43.1 KiB
  mesa: 21.3.5 → 21.3.8, -415598.0 KiB
  mjpegtools: ∅ → 2.2.1, +584.1 KiB
  mobile-broadband-provider-info: 20210805 → 20220315
  modemmanager: 1.18.4 → 1.18.6, +16.0 KiB
  mount-util-linux: 2.37.3 → 2.37.4
  mpg123: ∅ → 1.29.3, +1276.8 KiB
  ncurses: -3583.4 KiB
  neon: ∅ → 0.32.2, +734.6 KiB
  neovim-unwrapped: +82.4 KiB
  network-manager-applet: 1.24.0 → 1.26.0, +78.1 KiB
  networkmanager: 1.36.2 → 1.36.4, -22.0 KiB
  nftables: 1.0.1 → 1.0.2, +21.4 KiB
  nghttp2: 1.43.0 → 1.47.0, -17.7 KiB
  nix: 2.4 → ∅, -14649.6 KiB
  nix-direnv: 1.6.0 → 2.0.0
  nixos: +74.0 KiB
  nixos-manual: +218.9 KiB
  nixos-system-sloth: 22.05.20220314.73ad5f9 → 22.05.20220416.75ad56b
  nixpkgs-fmt: -39.4 KiB
  nodejs: 14.19.0, 16.14.0 → 14.19.1, 16.14.2, +133.1 KiB
  nss: 3.74 → 3.76
  nushell: 0.44.0 → 0.60.0, -336362.7 KiB
  ocl-icd: ∅ → 2.3.1, +281.7 KiB
  omnisharp-roslyn: 1.38.0 → 1.38.2, +201.3 KiB
  openal-soft: ∅ → 1.21.1, +1430.5 KiB
  openblas: ∅ → 0.3.20, +27762.4 KiB
  openconnect: 8.10 → 8.20, +127.6 KiB
  opencv: ∅ → 4.5.4, +64690.2 KiB
  openexr: ∅ → 2.5.7, +4683.9 KiB
  openfortivpn: 1.17.1 → 1.17.2
  openh264: ∅ → 2.2.0, +3813.3 KiB
  openssh: 8.8p1 → 9.0p1, +9.6 KiB
  openssl: 1.1.1m → 1.1.1n
  openvpn: 2.5.5 → 2.5.6, +9.5 KiB
  pango: 1.50.3 → 1.50.6
  perl: -63.4 KiB
  pipewire: 0.3.48 → 0.3.49, +11.3 KiB
  polkit: -8.8 KiB
  poppler-glib: 22.01.0 → 22.03.0, +21.9 KiB
  poppler-utils: 22.01.0 → 22.03.0, +23.4 KiB
  popt: -172.2 KiB
  postgresql: 13.5 → 13.6
  procps: -14.3 KiB
  procs: +34.7 KiB
  protobuf: ∅ → 3.19.3, +25486.4 KiB
  pulseaudio: -13.1 KiB
  pyright: 1.1.228 → 1.1.237, +449.6 KiB
  python3: 3.9.10 → 3.9.11, +608.2 KiB
  python3.9-Pillow: 9.0.0 → 9.0.1, -185.0 KiB
  python3.9-PyYAML: 6.0 → ∅, -676.7 KiB
  python3.9-click: 8.0.3 → 8.0.4
  python3.9-cryptography: -88.8 KiB
  python3.9-markupsafe: 2.0.1 → 2.1.0
  python3.9-nix-prefetch-github: 5.0.1 → 5.1.2, +47.7 KiB
  python3.9-platformdirs: 2.4.1 → 2.5.1
  python3.9-pyopenssl: 21.0.0 → 22.0.0
  python3.9-pyparsing: 3.0.6 → 3.0.7
  python3.9-pyyaml: ∅ → 6.0, +676.8 KiB
  python3.9-setuptools: 57.2.0 → 60.8.2, +748.0 KiB
  python3.9-typing-extensions: 4.0.1 → 4.1.1, +36.1 KiB
  qemu: +41.1 KiB
  qrencode: ∅ → 4.1.1, +68.0 KiB
  qtwayland: +8.0 KiB
  raptor2: ∅ → 2.0.15, +590.6 KiB
  readline: 8.1p0 → 8.1p2
  ripgrep: -63.7 KiB
  rnix-lsp: -65.0 KiB
  rtmpdump-unstable: ∅ → 2019-03-30, +941.3 KiB
  rust-analyzer-nightly: 85311a8 → 1c22537, +511.6 KiB
  rust-src-stable: 2022-02-24 → 2022-04-07, +270.2 KiB
  rust-stable-with-components: 2022-02-24 → 2022-04-07, +1168.8 KiB
  rust-std-stable: 2022-02-24 → 2022-04-07, +5922.7 KiB
  rustc-stable: 2022-02-24 → 2022-04-07, +1928.5 KiB
  rustfmt-preview-stable: 2022-02-24 → 2022-04-07, +1153.2 KiB
  samba: -20.3 KiB
  sccache: -100.2 KiB
  shadow: 4.8.1 → 4.11.1, +579.5 KiB
  shellcheck: -182.4 KiB
  shfmt: +8.0 KiB
  shishi: 1.0.2 → ∅, -2429.1 KiB
  soundtouch: ∅ → 2.2, +294.4 KiB
  source: +2100.1 KiB
  spandsp: ∅ → 0.0.6, +888.6 KiB
  spidermonkey: +148.6 KiB
  sqlite: 3.37.2 → 3.38.2, +14.6 KiB
  starship: 1.3.0 → ∅, -7763.5 KiB
  starship-unstable: ∅ → 2022-04-12, +7657.2 KiB
  strace: 5.16 → 5.17, +8.2 KiB
  stylua: 0.12.4 → 0.13.1, +169.4 KiB
  system: +24.0 KiB
  systemd: 249.7 → 250.4, +3561.4 KiB
  systemd-minimal: 249.7 → 250.4, +2206.0 KiB
  tokei: +167.1 KiB
  tracker: 3.2.1 → 3.3.0, +98.3 KiB
  tree-sitter-cpp-grammar: +176.0 KiB
  tree-sitter-rust-grammar: +96.0 KiB
  tree-sitter-vim-grammar: +300.1 KiB
  tree-sitter-viml-bc573ef: ε → ∅, -2488.4 KiB
  tree-sitter-viml-c9d7008: ∅ → ε, +4046.9 KiB
  typescript: 4.6.2 → 4.6.3
  tzdata: 2021e → 2022a
  ublock-origin: 1.41.8 → 1.42.0, +27.0 KiB
  udisks2.conf: ∅ → ε
  unit-logrotate-checkconf.service: ∅ → ε
  util-linux: 2.37.3 → 2.37.4, -16030.5 KiB
  util-linux-minimal: ∅ → 2.37.4, +15935.8 KiB
  vim: 8.2.4227 → 8.2.4350, +85.0 KiB
  vim-language-server: 2.2.6 → 2.2.10, +13.5 KiB
  viu: +13.6 KiB
  vo-aacenc: ∅ → 0.1.3, +151.8 KiB
  wezterm: 20220101-133340-7edc5b5a → 20220408-101518-b908e2dd, +10086.4 KiB
  wildmidi: ∅ → 0.4.4, +219.3 KiB
  xfsprogs: 5.13.0 → 5.15.0, +57.8 KiB
  xsv: -20.5 KiB
  xterm: 371 → 372
  yarn: 1.22.17 → 1.22.18
  zellij: 0.26.0 → 0.27.0, +845.7 KiB
  zlib: 1.2.11 → 1.2.12
  zoxide: -25.2 KiB
  zstd: -8.8 KiB

Security vulnerability report

36 derivations with active advisories
36 derivations left out due to whitelisting

------------------------------------------------------------------------
ShellCheck-0.8.0

/nix/store/8s2kgwjycv4skyfmwkajwixspvqi9sv7-ShellCheck-0.8.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794    9.8

------------------------------------------------------------------------
anymap-0.12.1

/nix/store/vhp6fcd1fn2czspknvlj4wwf344kkpwf-anymap-0.12.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-38187    9.8

------------------------------------------------------------------------
async-2.2.4

/nix/store/l7msl1624f7r8ka8yr352aazd2ssccva-async-2.2.4.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138    7.8

------------------------------------------------------------------------
async-2.2.4-r1.cabal

/nix/store/57b103vn5qvkl7k4cjsnbbrai1ksfk7w-async-2.2.4-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138    7.8

------------------------------------------------------------------------
cereal-0.5.8.2

/nix/store/xbvnfzk7l7w4fxcqpicyvz3amqwm28j8-cereal-0.5.8.2.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105    9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104    5.3

------------------------------------------------------------------------
charset-0.3.9

/nix/store/7m1lqa1hj22aw2xq80mdic76cmw6y0yl-charset-0.3.9.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-16098    7.5

------------------------------------------------------------------------
commonmark-0.2.2

/nix/store/2gaayq8z3akzdgjwygwny5pam3y2d1gi-commonmark-0.2.2.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010    6.1

------------------------------------------------------------------------
dot-0.1.4

/nix/store/4agrkywx94x6117jgpwv88x3sx3i8hm7-dot-0.1.4.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-7639     5.3

------------------------------------------------------------------------
fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/hinimm71v50xynl7mzsc834jmc7mphbd-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860    6.5

------------------------------------------------------------------------
gcc-6.5.0

/nix/store/chilm7h80nhdcwzcqxp7y0f3l8safyih-gcc-6.5.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322    7.8

------------------------------------------------------------------------
go-1.16-linux-amd64-bootstrap

/nix/store/66q6dq59dn7rwj0gw5hhf807cfr3bwb4-go-1.16-linux-amd64-bootstrap.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-38297    9.8
https://nvd.nist.gov/vuln/detail/CVE-2022-23806    9.1
https://nvd.nist.gov/vuln/detail/CVE-2021-39293    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41771    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41772    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-44716    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-23772    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-23773    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-24921    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27191    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34558    6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-44717    4.8

------------------------------------------------------------------------
home-0.5.3

/nix/store/vvssh6ybf52ff7pbswilxdjdwn4yik4n-home-0.5.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-25264    6.7

------------------------------------------------------------------------
http-client-0.7.11

/nix/store/275cd8mpfi1s54ymcbiw359v9hzj1xn0-http-client-0.7.11.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5

------------------------------------------------------------------------
http-client-0.7.11-r1.cabal

/nix/store/agh5mx6g16x79fpjhrcn7yfpnm22ccxc-http-client-0.7.11-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5

------------------------------------------------------------------------
instant-0.1.12

/nix/store/0m21rq76j0a1wabjyxh0kvf2cw6d2dig-instant-0.1.12.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-13099    5.9

------------------------------------------------------------------------
jose-0.9

/nix/store/sxny5a2xzr91rgday6879innyfba0g0w-jose-0.9.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-29444    5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-29445    5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-29446    5.9

------------------------------------------------------------------------
lens-5.0.1

/nix/store/6s4ywrhssmkcvd8di5xps4fzijq0h3b2-lens-5.0.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-44458    9.6
https://nvd.nist.gov/vuln/detail/CVE-2021-23154    7.8

------------------------------------------------------------------------
lens-5.0.1-r3.cabal

/nix/store/3p9imnk54pjcyx93ynlqpzg53537n38s-lens-5.0.1-r3.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-44458    9.6
https://nvd.nist.gov/vuln/detail/CVE-2021-23154    7.8

------------------------------------------------------------------------
libde265-1.0.8

/nix/store/sgkbvnqlj5qwkcihr5dnys6hgzl1hjac-libde265-1.0.8.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1253     9.8

------------------------------------------------------------------------
lua-2.1.0

/nix/store/mvdx5hx9gn0bkwg7yxrjmiysk0nb8rpn-lua-2.1.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1
https://nvd.nist.gov/vuln/detail/CVE-2020-15888    8.8
https://nvd.nist.gov/vuln/detail/CVE-2020-15945    5.5

------------------------------------------------------------------------
lua-5.2.4

/nix/store/3ys80zy1cna0d4kjwccrwafdaji5q1xh-lua-5.2.4.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1

------------------------------------------------------------------------
lua-5.2.4-env

/nix/store/58pb70mr7bf0c6p7wsi1pdgingip952a-lua-5.2.4-env.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1
https://nvd.nist.gov/vuln/detail/CVE-2020-15888    8.8
https://nvd.nist.gov/vuln/detail/CVE-2020-15945    5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-43519    5.5

------------------------------------------------------------------------
lua-5.3.6

/nix/store/g23ffw9xjhsyzk97sxrj7y5w4b57mwi4-lua-5.3.6.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1

------------------------------------------------------------------------
markdown-0.33-1.rockspec

/nix/store/15d1b4dzy87hxk5g2ap1kjc6394my1ll-markdown-0.33-1.rockspec.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-1000874  6.1

------------------------------------------------------------------------
network-3.1.2.7

/nix/store/rk2d9k1dvxb6rfan4iwlf5gzdvapn6kq-network-3.1.2.7.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5

------------------------------------------------------------------------
quote-1.0.16

/nix/store/5nzf9vdgd2ax2is10xrixv6gvri84d6g-quote-1.0.16.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3

------------------------------------------------------------------------
safe-0.3.19

/nix/store/1nrqi14yi9hyq12snv4kvysfdi4jfqla-safe-0.3.19.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8
https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1
https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5

------------------------------------------------------------------------
subversion-1.14.2

/nix/store/xazaybglnj9p725p8g7bgrpx301kippf-subversion-1.14.2.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698    7.5
https://nvd.nist.gov/vuln/detail/CVE-2017-1000085  6.5
https://nvd.nist.gov/vuln/detail/CVE-2020-2304     6.5
https://nvd.nist.gov/vuln/detail/CVE-2020-2111     5.4
https://nvd.nist.gov/vuln/detail/CVE-2018-1000111  5.3

------------------------------------------------------------------------
systemd-2.3.0

/nix/store/0dhnri2n0f8pi6maq0myfjdqxc0jk7v7-systemd-2.3.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-1000082  9.8
https://nvd.nist.gov/vuln/detail/CVE-2018-15688    8.8
https://nvd.nist.gov/vuln/detail/CVE-2017-18078    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-6954     7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-15686    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-16864    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-16865    7.8
https://nvd.nist.gov/vuln/detail/CVE-2019-3843     7.8
https://nvd.nist.gov/vuln/detail/CVE-2019-3844     7.8
https://nvd.nist.gov/vuln/detail/CVE-2020-1712     7.8
https://nvd.nist.gov/vuln/detail/CVE-2017-9217     7.5
https://nvd.nist.gov/vuln/detail/CVE-2018-15687    7.0
https://nvd.nist.gov/vuln/detail/CVE-2019-3842     7.0
https://nvd.nist.gov/vuln/detail/CVE-2020-13776    6.7
https://nvd.nist.gov/vuln/detail/CVE-2018-1049     5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-33910    5.5
https://nvd.nist.gov/vuln/detail/CVE-2018-16888    4.7
https://nvd.nist.gov/vuln/detail/CVE-2019-20386    2.4

------------------------------------------------------------------------
vault-0.3.1.5

/nix/store/mav1s5v8r3s019gg4pa6c2hbmcw4qs0n-vault-0.3.1.5.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-19786    8.1
https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4
https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3

------------------------------------------------------------------------
vault-0.3.1.5-r1.cabal

/nix/store/8pzqir4l18p21907g0ba8adlrjvhkzwx-vault-0.3.1.5-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-19786    8.1
https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4
https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3

------------------------------------------------------------------------
websockets-0.12.7.3

/nix/store/2r1cxymkpmywc0cfqdg1qirb80jpq2rs-websockets-0.12.7.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880    5.9

------------------------------------------------------------------------
websockets-0.12.7.3-r1.cabal

/nix/store/mcnaf6d8iwml2mq55i5dxa4q6icbr34q-websockets-0.12.7.3-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880    5.9

------------------------------------------------------------------------
xshell-0.2.1

/nix/store/711ah0xyb6lx33jpix6vxk6r8n8fpgm5-xshell-0.2.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-42095    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27966    6.5

------------------------------------------------------------------------
zlib-0.6.2.3

/nix/store/02470wbmlinzv799fm3k5f832q4vcs0b-zlib-0.6.2.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-25032    7.5

------------------------------------------------------------------------
zlib-0.6.2.3-r1.cabal

/nix/store/7yik5gv39ncr9a0mbi90m4r3swbpw1zk-zlib-0.6.2.3-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-25032    7.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions[bot] commented 2 years ago

Report for `eden`

Version changes:

Version 1 -> 2:
  audit: +410.0 KiB
  aws-checksums: 0.1.11 → 0.1.12
  bash: 5.1-p12 → ∅, -1519.1 KiB
  bash-interactive: 5.1-p12 → 5.1-p16
  bat: +22.3 KiB
  binutils: -10.6 KiB
  bottom: +61.5 KiB
  cachix: +239.9 KiB
  cargo-stable: 2022-02-24 → 2022-04-07, +1328.3 KiB
  clang: 13.0.0 → 13.0.1, +179.5 KiB
  clang-tools: 13.0.0 → 13.0.1
  clang-wrapper: 13.0.0 → 13.0.1
  clippy-preview-stable: 2022-02-24 → 2022-04-07
  cmake-cursesUI: 3.22.2 → 3.22.3
  compiler-rt-libc: 13.0.0 → 13.0.1, +22.3 KiB
  cryptsetup: -450.6 KiB
  curl: 7.81.0 → 7.82.0
  cyrus-sasl: 2.1.27 → 2.1.28
  delta: -37.0 KiB
  direnv: 2.30.3 → 2.31.0
  dotnet-sdk: 6.0.100 → 6.0.201, +5847.0 KiB
  dua: 2.17.0 → 2.17.1, -36.8 KiB
  eslint_d: 11.1.1 → 12.0.0, -3048.2 KiB
  expat: 2.4.4 → 2.4.7
  fd: -13.2 KiB
  findutils: 4.8.0 → 4.9.0, -156.8 KiB
  fzf: 0.29.0 → 0.30.0, +8.3 KiB
  gdb: 11.1 → 11.2, -16.1 KiB
  gdbm: 1.20 → 1.23, +103.2 KiB
  getent-glibc: ∅ → 2.34-115
  gh: 2.5.2 → 2.8.0, +320.0 KiB
  git: +36.7 KiB
  glib: 2.70.2 → 2.72.0, +81.0 KiB
  glibc: 2.33-108 → ∅, -30359.7 KiB
  glibc-locales: 2.33-108 → 2.34-115
  gmp: 6.2.1 → ∅, -734.2 KiB
  gmp-with-cxx: ∅ → 6.2.1, +734.2 KiB
  gnumake: -8.4 KiB
  gnupg: 2.3.3 → 2.3.4, +9.0 KiB
  groff: -19.5 KiB
  gzip: 1.11 → 1.12
  http-parser: ∅ → 2.9.4, +64.7 KiB
  hub: +8.2 KiB
  hyperfine: -48.2 KiB
  just: 1.1.0 → 1.1.2, -41.0 KiB
  kbd: -12.5 KiB
  kmod: -10.5 KiB
  lab: +8.0 KiB
  lcms2: 2.12 → 2.13.1
  lf: 26 → 27, +36.6 KiB
  libapparmor: 3.0.3 → 3.0.4
  libarchive: 3.5.2 → 3.6.0, +8.9 KiB
  libcap: 2.49 → 2.63, +9.8 KiB
  libcbor: 0.8.0 → 0.9.0
  libfido2: 1.9.0 → 1.10.0
  libgit2: ∅ → 1.4.0, +2154.5 KiB
  libidn2: -254.7 KiB
  libjpeg-turbo: 2.1.2 → 2.1.3
  libnet: 1.2-rc3 → 1.2
  libnetfilter_conntrack: 1.0.8 → 1.0.9
  libunistring: -1596.1 KiB
  libusb: 1.0.24 → 1.0.25
  libuv: 1.43.0 → ∅, -335.3 KiB
  libxml2: 2.9.12 → 2.9.13
  lldb: 13.0.0 → 13.0.1
  llvm: 13.0.0 → 13.0.1, -23.5 KiB
  lowdown: 0.10.0 → 0.11.1
  lvm2: 2.03.14 → 2.03.15
  man: -621.2 KiB
  man-db: 2.9.4 → 2.10.1, +43.0 KiB
  ncurses: -3582.7 KiB
  neovim-unwrapped: +82.4 KiB
  nghttp2: 1.43.0 → 1.47.0
  nix: 2.4 → ∅, -14552.6 KiB
  nix-direnv: 1.6.0 → 2.0.0
  nixpkgs-fmt: -39.4 KiB
  nodejs: 14.19.0, 16.14.0 → 14.19.1, 16.14.2, +133.1 KiB
  nushell: 0.44.0 → 0.60.0, -336362.7 KiB
  omnisharp-roslyn: 1.38.0 → 1.38.2, +201.3 KiB
  openssh: 8.8p1 → 9.0p1, +9.6 KiB
  openssl: 1.1.1m → 1.1.1n
  perl: -63.4 KiB
  popt: 1.18 → ∅, -168.7 KiB
  procs: +34.7 KiB
  pyright: 1.1.228 → 1.1.237, +449.6 KiB
  python3: 3.9.10 → 3.9.11, +608.2 KiB
  python3.9-Pillow: 9.0.0 → 9.0.1, -185.0 KiB
  python3.9-PyYAML: 6.0 → ∅, -676.7 KiB
  python3.9-markupsafe: 2.0.1 → 2.1.0
  python3.9-nix-prefetch-github: 5.0.1 → 5.1.2, +47.7 KiB
  python3.9-platformdirs: 2.4.1 → 2.5.1
  python3.9-pyyaml: ∅ → 6.0, +676.8 KiB
  python3.9-typing-extensions: 4.0.1 → 4.1.1, +36.1 KiB
  readline: 8.1p0 → 8.1p2
  ripgrep: -63.7 KiB
  rnix-lsp: -65.0 KiB
  rust-analyzer-nightly: 85311a8 → 1c22537, +511.6 KiB
  rust-src-stable: 2022-02-24 → 2022-04-07, +270.2 KiB
  rust-stable-with-components: 2022-02-24 → 2022-04-07, +1168.8 KiB
  rust-std-stable: 2022-02-24 → 2022-04-07, +5922.7 KiB
  rustc-stable: 2022-02-24 → 2022-04-07, +1928.5 KiB
  rustfmt-preview-stable: 2022-02-24 → 2022-04-07, +1153.2 KiB
  sccache: -100.2 KiB
  shadow: 4.8.1 → 4.11.1, +291.0 KiB
  shellcheck: -182.4 KiB
  shfmt: +8.0 KiB
  source: +2100.1 KiB
  sqlite: 3.37.2 → 3.38.2, +14.6 KiB
  starship: 1.3.0 → ∅, -7763.5 KiB
  starship-unstable: ∅ → 2022-04-12, +7657.2 KiB
  stylua: 0.12.4 → 0.13.1, +169.4 KiB
  systemd: 249.7 → 250.4, +1778.3 KiB
  systemd-minimal: 249.7 → 250.4, +1106.7 KiB
  tokei: +167.1 KiB
  tree-sitter-cpp-grammar: +176.0 KiB
  tree-sitter-rust-grammar: +96.0 KiB
  tree-sitter-vim-grammar: +300.1 KiB
  tree-sitter-viml-bc573ef: ε → ∅, -2488.4 KiB
  tree-sitter-viml-c9d7008: ∅ → ε, +4046.9 KiB
  typescript: 4.6.2 → 4.6.3
  tzdata: 2021e → 2022a
  util-linux: 2.37.3 → ∅, -7945.3 KiB
  util-linux-minimal: ∅ → 2.37.4, +7914.1 KiB
  vim: 8.2.4227 → 8.2.4350, +85.0 KiB
  vim-language-server: 2.2.6 → 2.2.10, +13.5 KiB
  viu: +13.6 KiB
  xsv: -20.5 KiB
  yarn: 1.22.17 → 1.22.18
  zellij: 0.26.0 → 0.27.0, +845.7 KiB
  zlib: 1.2.11 → 1.2.12
  zoxide: -25.2 KiB

Security vulnerability report

29 derivations with active advisories
21 derivations left out due to whitelisting

------------------------------------------------------------------------
ShellCheck-0.8.0

/nix/store/8s2kgwjycv4skyfmwkajwixspvqi9sv7-ShellCheck-0.8.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794    9.8

------------------------------------------------------------------------
anymap-0.12.1

/nix/store/vhp6fcd1fn2czspknvlj4wwf344kkpwf-anymap-0.12.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-38187    9.8

------------------------------------------------------------------------
async-2.2.4

/nix/store/l7msl1624f7r8ka8yr352aazd2ssccva-async-2.2.4.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138    7.8

------------------------------------------------------------------------
async-2.2.4-r1.cabal

/nix/store/57b103vn5qvkl7k4cjsnbbrai1ksfk7w-async-2.2.4-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138    7.8

------------------------------------------------------------------------
cereal-0.5.8.2

/nix/store/xbvnfzk7l7w4fxcqpicyvz3amqwm28j8-cereal-0.5.8.2.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105    9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104    5.3

------------------------------------------------------------------------
charset-0.3.9

/nix/store/7m1lqa1hj22aw2xq80mdic76cmw6y0yl-charset-0.3.9.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-16098    7.5

------------------------------------------------------------------------
commonmark-0.2.2

/nix/store/2gaayq8z3akzdgjwygwny5pam3y2d1gi-commonmark-0.2.2.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010    6.1

------------------------------------------------------------------------
dot-0.1.4

/nix/store/4agrkywx94x6117jgpwv88x3sx3i8hm7-dot-0.1.4.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-7639     5.3

------------------------------------------------------------------------
go-1.16-linux-amd64-bootstrap

/nix/store/66q6dq59dn7rwj0gw5hhf807cfr3bwb4-go-1.16-linux-amd64-bootstrap.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-38297    9.8
https://nvd.nist.gov/vuln/detail/CVE-2022-23806    9.1
https://nvd.nist.gov/vuln/detail/CVE-2021-39293    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41771    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41772    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-44716    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-23772    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-23773    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-24921    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27191    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34558    6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-44717    4.8

------------------------------------------------------------------------
home-0.5.3

/nix/store/vvssh6ybf52ff7pbswilxdjdwn4yik4n-home-0.5.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-25264    6.7

------------------------------------------------------------------------
http-client-0.7.11

/nix/store/275cd8mpfi1s54ymcbiw359v9hzj1xn0-http-client-0.7.11.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5

------------------------------------------------------------------------
http-client-0.7.11-r1.cabal

/nix/store/agh5mx6g16x79fpjhrcn7yfpnm22ccxc-http-client-0.7.11-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5

------------------------------------------------------------------------
instant-0.1.12

/nix/store/0m21rq76j0a1wabjyxh0kvf2cw6d2dig-instant-0.1.12.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-13099    5.9

------------------------------------------------------------------------
jose-0.9

/nix/store/sxny5a2xzr91rgday6879innyfba0g0w-jose-0.9.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-29444    5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-29445    5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-29446    5.9

------------------------------------------------------------------------
lens-5.0.1

/nix/store/6s4ywrhssmkcvd8di5xps4fzijq0h3b2-lens-5.0.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-44458    9.6
https://nvd.nist.gov/vuln/detail/CVE-2021-23154    7.8

------------------------------------------------------------------------
lens-5.0.1-r3.cabal

/nix/store/3p9imnk54pjcyx93ynlqpzg53537n38s-lens-5.0.1-r3.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-44458    9.6
https://nvd.nist.gov/vuln/detail/CVE-2021-23154    7.8

------------------------------------------------------------------------
lua-2.1.0

/nix/store/mvdx5hx9gn0bkwg7yxrjmiysk0nb8rpn-lua-2.1.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1
https://nvd.nist.gov/vuln/detail/CVE-2020-15888    8.8
https://nvd.nist.gov/vuln/detail/CVE-2020-15945    5.5

------------------------------------------------------------------------
lua-5.3.6

/nix/store/g23ffw9xjhsyzk97sxrj7y5w4b57mwi4-lua-5.3.6.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1

------------------------------------------------------------------------
network-3.1.2.7

/nix/store/rk2d9k1dvxb6rfan4iwlf5gzdvapn6kq-network-3.1.2.7.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5

------------------------------------------------------------------------
quote-1.0.16

/nix/store/5nzf9vdgd2ax2is10xrixv6gvri84d6g-quote-1.0.16.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3

------------------------------------------------------------------------
safe-0.3.19

/nix/store/1nrqi14yi9hyq12snv4kvysfdi4jfqla-safe-0.3.19.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8
https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1
https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5

------------------------------------------------------------------------
systemd-2.3.0

/nix/store/0dhnri2n0f8pi6maq0myfjdqxc0jk7v7-systemd-2.3.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-1000082  9.8
https://nvd.nist.gov/vuln/detail/CVE-2018-15688    8.8
https://nvd.nist.gov/vuln/detail/CVE-2017-18078    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-6954     7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-15686    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-16864    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-16865    7.8
https://nvd.nist.gov/vuln/detail/CVE-2019-3843     7.8
https://nvd.nist.gov/vuln/detail/CVE-2019-3844     7.8
https://nvd.nist.gov/vuln/detail/CVE-2020-1712     7.8
https://nvd.nist.gov/vuln/detail/CVE-2017-9217     7.5
https://nvd.nist.gov/vuln/detail/CVE-2018-15687    7.0
https://nvd.nist.gov/vuln/detail/CVE-2019-3842     7.0
https://nvd.nist.gov/vuln/detail/CVE-2020-13776    6.7
https://nvd.nist.gov/vuln/detail/CVE-2018-1049     5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-33910    5.5
https://nvd.nist.gov/vuln/detail/CVE-2018-16888    4.7
https://nvd.nist.gov/vuln/detail/CVE-2019-20386    2.4

------------------------------------------------------------------------
vault-0.3.1.5

/nix/store/mav1s5v8r3s019gg4pa6c2hbmcw4qs0n-vault-0.3.1.5.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-19786    8.1
https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4
https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3

------------------------------------------------------------------------
vault-0.3.1.5-r1.cabal

/nix/store/8pzqir4l18p21907g0ba8adlrjvhkzwx-vault-0.3.1.5-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-19786    8.1
https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4
https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3

------------------------------------------------------------------------
websockets-0.12.7.3

/nix/store/2r1cxymkpmywc0cfqdg1qirb80jpq2rs-websockets-0.12.7.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880    5.9

------------------------------------------------------------------------
websockets-0.12.7.3-r1.cabal

/nix/store/mcnaf6d8iwml2mq55i5dxa4q6icbr34q-websockets-0.12.7.3-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880    5.9

------------------------------------------------------------------------
xshell-0.2.1

/nix/store/711ah0xyb6lx33jpix6vxk6r8n8fpgm5-xshell-0.2.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-42095    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27966    6.5

------------------------------------------------------------------------
zlib-0.6.2.3

/nix/store/02470wbmlinzv799fm3k5f832q4vcs0b-zlib-0.6.2.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-25032    7.5

------------------------------------------------------------------------
zlib-0.6.2.3-r1.cabal

/nix/store/7yik5gv39ncr9a0mbi90m4r3swbpw1zk-zlib-0.6.2.3-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-25032    7.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions[bot] commented 2 years ago

Report for `pride`

Version changes:

Version 1 -> 2:
  NetworkManager-fortisslvpn-gnome: 1.2.10 → 1.4.0, +207.4 KiB
  NetworkManager-openconnect: ∅ → 1.2.8, +3112.2 KiB
  NetworkManager-openconnect-gnome: 1.2.6 → ∅, -2464.2 KiB
  NetworkManager-openvpn: ∅ → 1.8.18, +1631.7 KiB
  NetworkManager-openvpn-gnome: 1.8.16 → ∅, -1409.9 KiB
  NetworkManager-vpnc: ∅ → 1.2.8, +868.5 KiB
  NetworkManager-vpnc-gnome: 1.2.6 → ∅, -740.7 KiB
  SDL2: 2.0.14 → 2.0.20, +5244.0 KiB
  adwaita-icon-theme: 41.0 → 42.0, -6421.6 KiB
  alacritty: -43.2 KiB
  at-spi2-core: 2.42.0 → 2.44.0
  audit: +825.1 KiB
  awesome: -10.0 KiB
  aws-checksums: 0.1.11 → 0.1.12
  bash: 5.1-p12 → ∅, -1519.2 KiB
  bash-interactive: 5.1-p12 → 5.1-p16
  bat: +22.3 KiB
  bind: 9.18.0 → 9.18.1, +8.9 KiB
  binutils: -10.6 KiB
  bluez: 5.62 → 5.63
  bottom: +61.5 KiB
  btrfs-progs: 5.16 → 5.16.2
  cachix: +239.9 KiB
  cargo-stable: 2022-02-24 → 2022-04-07, +1328.3 KiB
  chromaprint: ∅ → 1.5.1, +305.7 KiB
  clang: 13.0.0 → 13.0.1, +179.5 KiB
  clang-tools: 13.0.0 → 13.0.1
  clang-wrapper: 13.0.0 → 13.0.1
  clippy-preview-stable: 2022-02-24 → 2022-04-07
  cmake: 3.22.2 → 3.22.3
  cmake-cursesUI: 3.22.2 → 3.22.3
  compiler-rt-libc: 13.0.0 → 13.0.1, +22.3 KiB
  cpupower: 5.16.11 → 5.17.2
  cryptsetup: -904.8 KiB
  cups: 2.4.0 → 2.4.1
  curl: 7.81.0 → 7.82.0
  cyrus-sasl: 2.1.27 → 2.1.28
  dav1d: 0.9.2 → 1.0.0, +561.5 KiB
  dejavu-fonts: -249.2 KiB
  delta: -37.0 KiB
  dhcp: 4.4.2-P1 → 4.4.3, -5789.4 KiB
  directfb: ∅ → 1.7.7, +15145.3 KiB
  direnv: 2.30.3 → 2.31.0
  dosfstools: 4.1 → 4.2, +252.1 KiB
  dotnet-sdk: 6.0.100 → 6.0.201, +5847.0 KiB
  dua: 2.17.0 → 2.17.1, -36.8 KiB
  e2fsprogs: -8.6 KiB
  ed: 1.17 → 1.18
  ell: 0.46 → 0.49
  eslint_d: 11.1.1 → 12.0.0, -3048.2 KiB
  etc-nixos-initrd.conf: ε → ∅
  ethtool: 5.15 → 5.16
  expat: 2.4.4 → 2.4.7, +13.7 KiB
  extra: -74.3 KiB
  faad2: +601.1 KiB
  fd: -13.2 KiB
  ffmpeg: +50159.0 KiB
  findutils: 4.8.0 → 4.9.0, -150.9 KiB
  firefox: 97.0.2 → 99.0.1, +335.8 KiB
  firefox-unwrapped: 97.0.2 → 99.0.1, +8182.3 KiB
  flac: 1.3.3 → 1.3.4, +12.2 KiB
  flite: ∅ → 2.2, +110928.4 KiB
  freepats: ∅ → 20060219, +65217.9 KiB
  fuse: -8.9 KiB
  fzf: 0.29.0 → 0.30.0, +8.3 KiB
  gcr: +18.6 KiB
  gdb: 11.1 → 11.2, -16.1 KiB
  gdbm: 1.20 → 1.23, +212.0 KiB
  gdk-pixbuf: 2.42.6 → 2.42.8, -17.3 KiB
  getent-glibc: 2.33-108 → 2.34-115
  gh: 2.5.2 → 2.8.0, +320.0 KiB
  ghostscript: 9.55.0 → ∅, -45820.6 KiB
  ghostscript-with-X: ∅ → 9.55.0, +45820.4 KiB
  git: +36.7 KiB
  glib: 2.70.2 → 2.72.0, +179.8 KiB
  glib-networking: 2.70.1 → 2.72.0, +41.5 KiB
  glibc: 2.33-108 → ∅, -30152.8 KiB
  glibc-iconv: 2.33 → 2.34
  glibc-locales: 2.33-108 → 2.34-115
  glibc-multi: 2.33-108 → 2.34-115
  gmp: 6.2.1 → ∅, -1368.6 KiB
  gmp-with-cxx: ∅ → 6.2.1, +1368.7 KiB
  gnumake: -8.4 KiB
  gnupg: 2.3.3 → 2.3.4, +17.7 KiB
  gobject-introspection: 1.70.0 → 1.72.0, +37.6 KiB
  gpgme: 1.16.0 → 1.17.0, +16.4 KiB
  graphene: ∅ → 1.10.6, +1044.4 KiB
  groff: -19.5 KiB
  gsasl: 1.10.0 → ∅, -1097.9 KiB
  gsettings-desktop-schemas: 41.0 → 42.0, +65.7 KiB
  gsm: +189.6 KiB
  gss: 1.0.3 → ∅, -561.1 KiB
  gssdp: ∅ → 1.4.0.1, +234.5 KiB
  gst-plugins-bad: ∅ → 1.20.0, +25747.5 KiB
  gtk+3: 3.24.31 → 3.24.33
  gtk4: ∅ → 4.6.2, +35551.7 KiB
  guile: 2.2.7 → ∅, -44311.6 KiB
  gupnp: ∅ → 1.4.3, +651.6 KiB
  gupnp-igd: ∅ → 1.2.0, +100.9 KiB
  gzip: 1.11 → 1.12
  harfbuzz: 3.2.0 → 3.3.2, +67.2 KiB
  hdf5: +10644.5 KiB
  http-parser: ∅ → 2.9.4, +64.7 KiB
  hub: +8.2 KiB
  hwdb.bin: +177.5 KiB
  hyperfine: -48.2 KiB
  ilmbase: ∅ → 2.5.7, +2218.9 KiB
  initrd-linux: 5.16.11 → 5.17.2, +87.4 KiB
  intel-media-sdk: 22.2.0 → 22.3.0, +13.1 KiB
  interception-tools: -8.6 KiB
  just: 1.1.0 → 1.1.2, -41.0 KiB
  kbd: -28.0 KiB
  kernel: +73.1 KiB
  kmod: -25.1 KiB
  lab: +8.0 KiB
  lcms2: 2.12 → 2.13.1, +476.5 KiB
  lf: 26 → 27, +36.6 KiB
  libaom: 3.2.0 → 3.3.0, +4050.9 KiB
  libapparmor: 3.0.3 → 3.0.4
  libarchive: 3.5.2 → 3.6.0, +8.9 KiB
  libbluray: 1.3.0 → 1.3.1
  libbs2b: +81.4 KiB
  libbsd: 0.11.3 → 0.11.5
  libcamera-unstable: +532.7 KiB
  libcap: 2.49 → 2.63, +68.9 KiB
  libcbor: 0.8.0 → 0.9.0
  libdc1394: +419.4 KiB
  libde265: ∅ → 1.0.8, +2567.8 KiB
  libdecor: ∅ → 0.1.0, +249.2 KiB
  libdrm: 2.4.109 → 2.4.110, -11.8 KiB
  libdv: ∅ → 1.0.0, +441.2 KiB
  libdvdnav: +192.4 KiB
  libfido2: 1.9.0 → 1.10.0, +11.2 KiB
  libftdi: +100.0 KiB
  libgit2: ∅ → 1.4.0, +2154.5 KiB
  libgme: ∅ → 0.6.3, +842.4 KiB
  libgudev: +70.5 KiB
  libical: 3.0.11 → 3.0.14, +20.0 KiB
  libidn2: -254.7 KiB
  libinput: 1.19.3 → 1.20.0
  libjpeg-turbo: 2.1.2 → 2.1.3
  libkate: +2120.6 KiB
  libmicrodns: +41.4 KiB
  libnet: 1.2-rc3 → 1.2
  libnetfilter_conntrack: 1.0.8 → 1.0.9
  libnice: ∅ → 0.1.18, +935.5 KiB
  libnma: 1.8.34 → 1.8.38, +1690.6 KiB
  libopenmpt: ∅ → 0.5.11, +4184.8 KiB
  libqmi: 1.30.2 → 1.30.4
  libraw1394: +202.6 KiB
  libressl: 3.4.2 → 3.4.3
  librsvg: 2.52.5 → 2.54.0, +110.9 KiB
  libsecret: 0.20.4 → 0.20.5, +15.1 KiB
  libsoup: 3.0.4 → 3.0.5, +11.9 KiB
  libsrtp: ∅ → 2.4.2, +188.8 KiB
  libtiff: -12.5 KiB
  libunistring: -1596.1 KiB
  libusb: 1.0.24 → 1.0.25
  libuv: 1.43.0 → ∅, -334.9 KiB
  libva: 1.7.3, 2.13.0 → 1.8.3, 2.14.0, -3473.9 KiB
  libvlc: -24.3 KiB
  libwacom: 1.99.1 → 2.1.0, +8.7 KiB
  libxkbcommon: 1.3.1 → 1.4.0
  libxml2: 2.9.12 → 2.9.13
  libxslt: ∅ → 1.1.35, +1109.9 KiB
  linux: 5.16.11, 5.16.11-modules → 5.17.2, 5.17.2-modules, +17797.1 KiB
  lldb: 13.0.0 → 13.0.1
  llvm: 13.0.0 → 13.0.1, -112.3 KiB
  locale-glibc: 2.33-108 → 2.34-115
  lowdown: 0.10.0 → 0.11.1
  lrdf: ∅ → 0.6.1, +121.0 KiB
  luajit: -2078.9 KiB
  luarocks: 3.2.1 → 3.8.0, +37.2 KiB
  lvm2: 2.03.14 → 2.03.15, -120.9 KiB
  lvm2-with-dmeventd: 2.03.14 → 2.03.15, -103.9 KiB
  mailutils: 3.14 → ∅, -11977.0 KiB
  man: -621.2 KiB
  man-db: 2.9.4 → 2.10.1, +43.1 KiB
  mbedtls: -16.0 KiB
  mesa: 21.3.5 → 21.3.8, -840336.7 KiB
  mjpegtools: ∅ → 2.2.1, +1171.7 KiB
  mobile-broadband-provider-info: 20210805 → 20220315
  modemmanager: 1.18.4 → 1.18.6, +16.0 KiB
  mount-util-linux: 2.37.3 → 2.37.4
  ncurses: -3583.4 KiB
  neon: ∅ → 0.32.2, +1480.2 KiB
  neovim-unwrapped: +82.4 KiB
  network-manager-applet: 1.24.0 → 1.26.0, +78.1 KiB
  networkmanager: 1.36.2 → 1.36.4, -22.0 KiB
  nftables: 1.0.1 → 1.0.2, +21.4 KiB
  nghttp2: 1.43.0 → 1.47.0, +54.0 KiB
  nix: 2.4 → ∅, -14649.6 KiB
  nix-direnv: 1.6.0 → 2.0.0
  nixos: +74.0 KiB
  nixos-manual: +218.9 KiB
  nixos-system-pride: 22.05.20220314.73ad5f9 → 22.05.20220416.75ad56b
  nixpkgs-fmt: -39.4 KiB
  nodejs: 14.19.0, 16.14.0 → 14.19.1, 16.14.2, +133.1 KiB
  nss: 3.74 → 3.76, +9.3 KiB
  nushell: 0.44.0 → 0.60.0, -336362.7 KiB
  nvidia-settings: 510.54 → 510.60.02
  nvidia-vaapi-driver: ∅ → 0.0.5, +160.7 KiB
  nvidia-x11: 510.54-5.16.11 → 510.60.02-5.17.2, +304.0 KiB
  obs-studio: 27.2.1 → 27.2.2
  ocl-icd: +294.2 KiB
  omnisharp-roslyn: 1.38.0 → 1.38.2, +201.3 KiB
  openal-soft: -8.7 KiB
  openblas: 0.3.19 → 0.3.20, +22711.8 KiB
  openconnect: 8.10 → 8.20, +127.6 KiB
  opencv: +64155.4 KiB
  openexr: +4602.0 KiB
  openfortivpn: 1.17.1 → 1.17.2
  openh264: 2.1.1 → 2.2.0, +3573.8 KiB
  openjpeg: +2373.5 KiB
  openssh: 8.8p1 → 9.0p1, +9.6 KiB
  openssl: 1.1.1m → 1.1.1n
  openvpn: 2.5.5 → 2.5.6, +9.5 KiB
  pango: 1.50.3 → 1.50.6
  perl: -127.0 KiB
  pipewire: 0.3.48 → 0.3.49, +64.6 KiB
  polkit: -9.0 KiB
  poppler-glib: 22.01.0 → 22.03.0, +21.9 KiB
  poppler-utils: 22.01.0 → 22.03.0, +23.4 KiB
  postgresql: 13.5 → 13.6
  procps: -14.3 KiB
  procs: +34.7 KiB
  protobuf: +23620.8 KiB
  pulseaudio: -13.1 KiB
  pyright: 1.1.228 → 1.1.237, +449.6 KiB
  python3: 3.9.10 → 3.9.11, +1202.6 KiB
  python3.9-Pillow: 9.0.0 → 9.0.1, -185.0 KiB
  python3.9-PyYAML: 6.0 → ∅, -676.7 KiB
  python3.9-click: 8.0.3 → 8.0.4
  python3.9-cryptography: -88.8 KiB
  python3.9-markupsafe: 2.0.1 → 2.1.0
  python3.9-nix-prefetch-github: 5.0.1 → 5.1.2, +47.7 KiB
  python3.9-platformdirs: 2.4.1 → 2.5.1
  python3.9-pyopenssl: 21.0.0 → 22.0.0
  python3.9-pyparsing: 3.0.6 → 3.0.7
  python3.9-pyyaml: ∅ → 6.0, +676.8 KiB
  python3.9-setuptools: 57.2.0 → 60.8.2, +748.0 KiB
  python3.9-typing-extensions: 4.0.1 → 4.1.1, +36.1 KiB
  qemu: +41.1 KiB
  qrencode: ∅ → 4.1.1, +134.5 KiB
  qtwayland: +8.0 KiB
  raptor2: ∅ → 2.0.15, +1200.6 KiB
  readline: 8.1p0 → 8.1p2
  ripgrep: -63.7 KiB
  rnix-lsp: -65.0 KiB
  rust-analyzer-nightly: 85311a8 → 1c22537, +511.6 KiB
  rust-src-stable: 2022-02-24 → 2022-04-07, +270.2 KiB
  rust-stable-with-components: 2022-02-24 → 2022-04-07, +1168.8 KiB
  rust-std-stable: 2022-02-24 → 2022-04-07, +5922.7 KiB
  rustc-stable: 2022-02-24 → 2022-04-07, +1928.5 KiB
  rustfmt-preview-stable: 2022-02-24 → 2022-04-07, +1153.2 KiB
  samba: -20.3 KiB
  sccache: -100.2 KiB
  shadow: 4.8.1 → 4.11.1, +579.5 KiB
  shellcheck: -182.4 KiB
  shfmt: +8.0 KiB
  shishi: 1.0.2 → ∅, -2429.1 KiB
  soundtouch: ∅ → 2.2, +575.7 KiB
  source: +2100.1 KiB
  spandsp: ∅ → 0.0.6, +1775.6 KiB
  spidermonkey: +303.9 KiB
  sqlite: 3.37.2 → 3.38.2, +59.7 KiB
  starship: 1.3.0 → ∅, -7763.5 KiB
  starship-unstable: ∅ → 2022-04-12, +7657.2 KiB
  steam: +628.1 KiB
  steam-run: +624.6 KiB
  steam-run-usr: +19.2 KiB
  steam-usr: +19.2 KiB
  strace: 5.16 → 5.17, +8.2 KiB
  stylua: 0.12.4 → 0.13.1, +169.4 KiB
  system: +24.0 KiB
  systemd: 249.7 → 250.4, +3608.0 KiB
  systemd-minimal: 249.7 → 250.4, +2206.0 KiB
  tokei: +167.1 KiB
  tracker: 3.2.1 → 3.3.0, +211.1 KiB
  tree-sitter-cpp-grammar: +176.0 KiB
  tree-sitter-rust-grammar: +96.0 KiB
  tree-sitter-vim-grammar: +300.1 KiB
  tree-sitter-viml-bc573ef: ε → ∅, -2488.4 KiB
  tree-sitter-viml-c9d7008: ∅ → ε, +4046.9 KiB
  typescript: 4.6.2 → 4.6.3
  tzdata: 2021e → 2022a
  ublock-origin: 1.41.8 → 1.42.0, +27.0 KiB
  udisks2.conf: ∅ → ε
  unit-logrotate-checkconf.service: ∅ → ε
  util-linux: 2.37.3 → 2.37.4, -16885.6 KiB
  util-linux-minimal: ∅ → 2.37.4, +16790.8 KiB
  v4l-utils: 1.20.0 → 1.22.1
  vim: 8.2.4227 → 8.2.4350, +85.0 KiB
  vim-language-server: 2.2.6 → 2.2.10, +13.5 KiB
  viu: +13.6 KiB
  vo-aacenc: ∅ → 0.1.3, +301.5 KiB
  wezterm: 20220101-133340-7edc5b5a → 20220408-101518-b908e2dd, +10086.4 KiB
  wildmidi: ∅ → 0.4.4, +428.7 KiB
  wrapped-obs-studio: 27.2.1 → 27.2.2
  xfsprogs: 5.13.0 → 5.15.0, +57.8 KiB
  xsv: -20.5 KiB
  xterm: 371 → 372
  yarn: 1.22.17 → 1.22.18
  zellij: 0.26.0 → 0.27.0, +845.7 KiB
  zenity: 3.41.0 → 3.42.0
  zlib: 1.2.11 → 1.2.12
  zoxide: -25.2 KiB
  zstd: -8.8 KiB

Security vulnerability report

37 derivations with active advisories
38 derivations left out due to whitelisting

------------------------------------------------------------------------
ShellCheck-0.8.0

/nix/store/8s2kgwjycv4skyfmwkajwixspvqi9sv7-ShellCheck-0.8.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794    9.8

------------------------------------------------------------------------
anymap-0.12.1

/nix/store/vhp6fcd1fn2czspknvlj4wwf344kkpwf-anymap-0.12.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-38187    9.8

------------------------------------------------------------------------
async-2.2.4

/nix/store/l7msl1624f7r8ka8yr352aazd2ssccva-async-2.2.4.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138    7.8

------------------------------------------------------------------------
async-2.2.4-r1.cabal

/nix/store/57b103vn5qvkl7k4cjsnbbrai1ksfk7w-async-2.2.4-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138    7.8

------------------------------------------------------------------------
cereal-0.5.8.2

/nix/store/xbvnfzk7l7w4fxcqpicyvz3amqwm28j8-cereal-0.5.8.2.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11105    9.8
https://nvd.nist.gov/vuln/detail/CVE-2020-11104    5.3

------------------------------------------------------------------------
charset-0.3.9

/nix/store/7m1lqa1hj22aw2xq80mdic76cmw6y0yl-charset-0.3.9.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-16098    7.5

------------------------------------------------------------------------
commonmark-0.2.2

/nix/store/2gaayq8z3akzdgjwygwny5pam3y2d1gi-commonmark-0.2.2.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-10010    6.1

------------------------------------------------------------------------
dot-0.1.4

/nix/store/4agrkywx94x6117jgpwv88x3sx3i8hm7-dot-0.1.4.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-7639     5.3

------------------------------------------------------------------------
fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9

/nix/store/hinimm71v50xynl7mzsc834jmc7mphbd-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-14860    6.5

------------------------------------------------------------------------
gcc-6.5.0

/nix/store/chilm7h80nhdcwzcqxp7y0f3l8safyih-gcc-6.5.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322    7.8

------------------------------------------------------------------------
gcc-7.5.0

/nix/store/v3di8rw9s4r5clzf1zzh63r5ixqyrvfi-gcc-7.5.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-12886    8.1
https://nvd.nist.gov/vuln/detail/CVE-2021-37322    7.8

------------------------------------------------------------------------
go-1.16-linux-amd64-bootstrap

/nix/store/66q6dq59dn7rwj0gw5hhf807cfr3bwb4-go-1.16-linux-amd64-bootstrap.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-38297    9.8
https://nvd.nist.gov/vuln/detail/CVE-2022-23806    9.1
https://nvd.nist.gov/vuln/detail/CVE-2021-39293    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41771    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41772    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-44716    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-23772    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-23773    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-24921    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27191    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-34558    6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-44717    4.8

------------------------------------------------------------------------
home-0.5.3

/nix/store/vvssh6ybf52ff7pbswilxdjdwn4yik4n-home-0.5.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-25264    6.7

------------------------------------------------------------------------
http-client-0.7.11

/nix/store/275cd8mpfi1s54ymcbiw359v9hzj1xn0-http-client-0.7.11.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5

------------------------------------------------------------------------
http-client-0.7.11-r1.cabal

/nix/store/agh5mx6g16x79fpjhrcn7yfpnm22ccxc-http-client-0.7.11-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5

------------------------------------------------------------------------
instant-0.1.12

/nix/store/0m21rq76j0a1wabjyxh0kvf2cw6d2dig-instant-0.1.12.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-13099    5.9

------------------------------------------------------------------------
jose-0.9

/nix/store/sxny5a2xzr91rgday6879innyfba0g0w-jose-0.9.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-29444    5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-29445    5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-29446    5.9

------------------------------------------------------------------------
lens-5.0.1

/nix/store/6s4ywrhssmkcvd8di5xps4fzijq0h3b2-lens-5.0.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-44458    9.6
https://nvd.nist.gov/vuln/detail/CVE-2021-23154    7.8

------------------------------------------------------------------------
lens-5.0.1-r3.cabal

/nix/store/3p9imnk54pjcyx93ynlqpzg53537n38s-lens-5.0.1-r3.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-44458    9.6
https://nvd.nist.gov/vuln/detail/CVE-2021-23154    7.8

------------------------------------------------------------------------
libde265-1.0.8

/nix/store/sgkbvnqlj5qwkcihr5dnys6hgzl1hjac-libde265-1.0.8.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1253     9.8

------------------------------------------------------------------------
lua-2.1.0

/nix/store/mvdx5hx9gn0bkwg7yxrjmiysk0nb8rpn-lua-2.1.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1
https://nvd.nist.gov/vuln/detail/CVE-2020-15888    8.8
https://nvd.nist.gov/vuln/detail/CVE-2020-15945    5.5

------------------------------------------------------------------------
lua-5.2.4

/nix/store/3ys80zy1cna0d4kjwccrwafdaji5q1xh-lua-5.2.4.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1

------------------------------------------------------------------------
lua-5.2.4-env

/nix/store/58pb70mr7bf0c6p7wsi1pdgingip952a-lua-5.2.4-env.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1
https://nvd.nist.gov/vuln/detail/CVE-2020-15888    8.8
https://nvd.nist.gov/vuln/detail/CVE-2020-15945    5.5
https://nvd.nist.gov/vuln/detail/CVE-2021-43519    5.5

------------------------------------------------------------------------
lua-5.3.6

/nix/store/g23ffw9xjhsyzk97sxrj7y5w4b57mwi4-lua-5.3.6.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1

------------------------------------------------------------------------
markdown-0.33-1.rockspec

/nix/store/15d1b4dzy87hxk5g2ap1kjc6394my1ll-markdown-0.33-1.rockspec.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-1000874  6.1

------------------------------------------------------------------------
network-3.1.2.7

/nix/store/rk2d9k1dvxb6rfan4iwlf5gzdvapn6kq-network-3.1.2.7.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5

------------------------------------------------------------------------
quote-1.0.16

/nix/store/5nzf9vdgd2ax2is10xrixv6gvri84d6g-quote-1.0.16.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2020-16194    5.3

------------------------------------------------------------------------
safe-0.3.19

/nix/store/1nrqi14yi9hyq12snv4kvysfdi4jfqla-safe-0.3.19.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8
https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3
https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1
https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5
https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5

------------------------------------------------------------------------
subversion-1.14.2

/nix/store/xazaybglnj9p725p8g7bgrpx301kippf-subversion-1.14.2.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698    7.5
https://nvd.nist.gov/vuln/detail/CVE-2017-1000085  6.5
https://nvd.nist.gov/vuln/detail/CVE-2020-2304     6.5
https://nvd.nist.gov/vuln/detail/CVE-2020-2111     5.4
https://nvd.nist.gov/vuln/detail/CVE-2018-1000111  5.3

------------------------------------------------------------------------
systemd-2.3.0

/nix/store/0dhnri2n0f8pi6maq0myfjdqxc0jk7v7-systemd-2.3.0.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2017-1000082  9.8
https://nvd.nist.gov/vuln/detail/CVE-2018-15688    8.8
https://nvd.nist.gov/vuln/detail/CVE-2017-18078    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-6954     7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-15686    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-16864    7.8
https://nvd.nist.gov/vuln/detail/CVE-2018-16865    7.8
https://nvd.nist.gov/vuln/detail/CVE-2019-3843     7.8
https://nvd.nist.gov/vuln/detail/CVE-2019-3844     7.8
https://nvd.nist.gov/vuln/detail/CVE-2020-1712     7.8
https://nvd.nist.gov/vuln/detail/CVE-2017-9217     7.5
https://nvd.nist.gov/vuln/detail/CVE-2018-15687    7.0
https://nvd.nist.gov/vuln/detail/CVE-2019-3842     7.0
https://nvd.nist.gov/vuln/detail/CVE-2020-13776    6.7
https://nvd.nist.gov/vuln/detail/CVE-2018-1049     5.9
https://nvd.nist.gov/vuln/detail/CVE-2021-33910    5.5
https://nvd.nist.gov/vuln/detail/CVE-2018-16888    4.7
https://nvd.nist.gov/vuln/detail/CVE-2019-20386    2.4

------------------------------------------------------------------------
vault-0.3.1.5

/nix/store/mav1s5v8r3s019gg4pa6c2hbmcw4qs0n-vault-0.3.1.5.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-19786    8.1
https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4
https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3

------------------------------------------------------------------------
vault-0.3.1.5-r1.cabal

/nix/store/8pzqir4l18p21907g0ba8adlrjvhkzwx-vault-0.3.1.5-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-19786    8.1
https://nvd.nist.gov/vuln/detail/CVE-2020-13223    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-27400    7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-41802    5.4
https://nvd.nist.gov/vuln/detail/CVE-2020-25594    5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-3024     5.3
https://nvd.nist.gov/vuln/detail/CVE-2021-38554    5.3

------------------------------------------------------------------------
websockets-0.12.7.3

/nix/store/2r1cxymkpmywc0cfqdg1qirb80jpq2rs-websockets-0.12.7.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880    5.9

------------------------------------------------------------------------
websockets-0.12.7.3-r1.cabal

/nix/store/mcnaf6d8iwml2mq55i5dxa4q6icbr34q-websockets-0.12.7.3-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880    5.9

------------------------------------------------------------------------
xshell-0.2.1

/nix/store/711ah0xyb6lx33jpix6vxk6r8n8fpgm5-xshell-0.2.1.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-42095    7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-27966    6.5

------------------------------------------------------------------------
zlib-0.6.2.3

/nix/store/02470wbmlinzv799fm3k5f832q4vcs0b-zlib-0.6.2.3.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-25032    7.5

------------------------------------------------------------------------
zlib-0.6.2.3-r1.cabal

/nix/store/7yik5gv39ncr9a0mbi90m4r3swbpw1zk-zlib-0.6.2.3-r1.cabal.drv
CVE                                                CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2018-25032    7.5

use --show-whitelisted to see derivations with only whitelisted CVEs

github-actions[bot] commented 2 years ago

Report for `theman`

Version changes:

Version 1 -> 2:'
'  ICU: [32;1m-39144.9 KiB[0m'
'  Libsystem: [32;1m-17688.6 KiB[0m'
'  aws-checksums: 0.1.11 → 0.1.12'
'  bash: 5.1-p12 → ∅, [32;1m-1149.4 KiB[0m'
'  bash-interactive: 5.1-p12 → 5.1-p16'
'  bat: [31;1m+11.4 KiB[0m'
'  brotli: [32;1m-1918.2 KiB[0m'
'  curl: 7.81.0 → ∅, [32;1m-579.4 KiB[0m'
'  cyrus-sasl: 2.1.27 → 2.1.28'
'  darwin: [31;1m+51.7 KiB[0m'
'  darwin-system: 22.05.20220314.73ad5f9+darwin4.17fbc68 → 22.05.20220416.75ad56b+darwin4.4fdbb81'
'  delta: [32;1m-59.6 KiB[0m'
'  direnv: 2.30.3 → 2.31.0, [31;1m+8.2 KiB[0m'
'  dua: 2.17.0 → 2.17.1, [32;1m-53.8 KiB[0m'
'  efm-langserver: [31;1m+8.1 KiB[0m'
'  eslint_d: 11.1.1 → 12.0.0, [32;1m-3048.2 KiB[0m'
'  expat: 2.4.4 → 2.4.7'
'  fd: [32;1m-20.9 KiB[0m'
'  findutils: 4.8.0 → 4.9.0'
'  fzf: 0.29.0 → 0.30.0, [31;1m+12.5 KiB[0m'
'  gdbm: 1.20 → 1.23, [31;1m+103.3 KiB[0m'
'  gettext: [32;1m-8342.4 KiB[0m'
'  gh: 2.5.2 → 2.8.0, [31;1m+335.1 KiB[0m'
'  git: [31;1m+42.5 KiB[0m'
'  gmp: 6.2.1 → ∅, [32;1m-664.7 KiB[0m'
'  gmp-with-cxx: ∅ → 6.2.1, [31;1m+664.7 KiB[0m'
'  gnupg: 2.3.3 → 2.3.4, [31;1m+20.6 KiB[0m'
'  grv: [31;1m+8.2 KiB[0m'
'  gzip: 1.11 → 1.12'
'  lcms2: 2.12 → 2.13.1, [31;1m+8.6 KiB[0m'
'  lf: 26 → 27, [31;1m+38.3 KiB[0m'
'  libarchive: 3.5.2 → 3.6.0, [31;1m+12.5 KiB[0m'
'  libcbor: 0.8.0 → 0.9.0'
'  libcxx: [32;1m-2085.2 KiB[0m'
'  libcxxabi: [32;1m-634.7 KiB[0m'
'  libfido2: 1.9.0 → 1.10.0'
'  libiconv: [32;1m-1041.2 KiB[0m'
'  libidn2: [32;1m-136.5 KiB[0m'
'  libjpeg-turbo: 2.1.2 → 2.1.3'
'  libkrb5: [32;1m-1684.7 KiB[0m'
'  libssh2: [32;1m-233.9 KiB[0m'
'  libunistring: [32;1m-1529.7 KiB[0m'
'  libusb: 1.0.24 → 1.0.25'
'  libuv: 1.43.0 → ∅, [32;1m-267.9 KiB[0m'
'  libxml2: 2.9.12 → ∅, [32;1m-1378.5 KiB[0m'
'  lowdown: 0.10.0 → 0.11.1'
'  man: [32;1m-620.2 KiB[0m'
'  man-db: 2.9.4 → 2.10.1, [31;1m+54.1 KiB[0m'
'  mcfly: 0.5.13 → 0.6.0, [32;1m-62.5 KiB[0m'
'  ncurses: [32;1m-3308.8 KiB[0m'
'  neovim-unwrapped: [31;1m+134.8 KiB[0m'
'  nghttp2: 1.43.0 → ∅, [32;1m-172.1 KiB[0m'
'  nix-direnv: 1.6.0 → 2.0.0'
'  nixpkgs-fmt: [32;1m-68.9 KiB[0m'
'  nodejs: 14.19.0, 16.14.0 → 14.19.1, 16.14.2, [31;1m+129.8 KiB[0m'
'  nushell: 0.44.0 → 0.60.0, [32;1m-309036.1 KiB[0m'
'  openssh: 8.8p1 → 9.0p1, [31;1m+16.6 KiB[0m'
'  openssl: 1.1.1m → ∅, [32;1m-3143.2 KiB[0m'
'  perl: [32;1m-67.2 KiB[0m'
'  pipenv: 2022.1.8 → 2022.4.8, [32;1m-96.7 KiB[0m'
'  pyright: 1.1.228 → 1.1.237, [31;1m+449.6 KiB[0m'
'  python3: 3.9.10 → 3.9.11, [31;1m+231.6 KiB[0m'
'  python3.9-Pillow: 9.0.0 → 9.0.1'
'  python3.9-filelock: 3.4.2 → 3.6.0'
'  python3.9-pip: 21.3.1 → 22.0.3, [31;1m+2451.3 KiB[0m'
'  python3.9-platformdirs: 2.4.1 → 2.5.1'
'  python3.9-setuptools: 57.2.0 → 60.8.2, [31;1m+748.0 KiB[0m'
'  python3.9-typing-extensions: 4.0.1 → 4.1.1, [31;1m+36.1 KiB[0m'
'  python3.9-virtualenv: 20.13.0 → 20.13.2, [31;1m+2159.2 KiB[0m'
'  readline: 8.1p0 → 8.1p2'
'  repo: [31;1m+16.4 KiB[0m'
'  ripgrep: [32;1m-81.4 KiB[0m'
'  rnix-lsp: [32;1m-81.4 KiB[0m'
'  shfmt: [31;1m+8.2 KiB[0m'
'  source: [31;1m+2100.1 KiB[0m'
'  sqlite: 3.37.2 → 3.38.2, [31;1m+24.8 KiB[0m'
'  starship: 1.3.0 → ∅, [32;1m-5484.5 KiB[0m'
'  starship-unstable: ∅ → 2022-04-12, [31;1m+5424.4 KiB[0m'
'  stylua: 0.12.4 → 0.13.1, [31;1m+138.0 KiB[0m'
'  swift-corefoundation-unstable: [32;1m-3411.8 KiB[0m'
'  tree-sitter-cpp-grammar: [31;1m+184.0 KiB[0m'
'  tree-sitter-rust-grammar: [31;1m+96.0 KiB[0m'
'  tree-sitter-vim-grammar: [31;1m+300.2 KiB[0m'
'  tree-sitter-viml-bc573ef: ε → ∅, [32;1m-2488.4 KiB[0m'
'  tree-sitter-viml-c9d7008: ∅ → ε, [31;1m+4046.9 KiB[0m'
'  typescript: 4.6.2 → 4.6.3'
'  tzdata: 2021e → 2022a'
'  vim-language-server: 2.2.6 → 2.2.10, [31;1m+13.5 KiB[0m'
'  zlib: 1.2.11 → ∅, [32;1m-101.1 KiB[0m'
'  zoxide: [32;1m-14.4 KiB[0m'
'  zstd: [32;1m-1070.3 KiB[0m

Security vulnerability report

17 derivations with active advisories'
'17 derivations left out due to whitelisting'
''
'------------------------------------------------------------------------'
'async-2.2.4'
''
'/nix/store/kz0a4hh4a18zf8m396q07nsl8d65yppw-async-2.2.4.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-43138    7.8'
''
'------------------------------------------------------------------------'
'async-2.2.4-r1.cabal'
''
'/nix/store/00pc92514qyw6m6170pr2z0r9ha7ylbp-async-2.2.4-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-43138    7.8'
''
'------------------------------------------------------------------------'
'cereal-0.5.8.2'
''
'/nix/store/4877rjjyc7h0rv2jh8x8vglfxbsihdd1-cereal-0.5.8.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11105    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11104    5.3'
''
'------------------------------------------------------------------------'
'charset-0.3.9'
''
'/nix/store/qm5vbbpfrmsh4mr5plddaf3xiaxjg4j8-charset-0.3.9.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2017-16098    7.5'
''
'------------------------------------------------------------------------'
'commonmark-0.2.2'
''
'/nix/store/q0qd1k60g81r3hg9vkcxd0fx9aczia1x-commonmark-0.2.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-10010    6.1'
''
'------------------------------------------------------------------------'
'go-1.16-darwin-amd64-bootstrap'
''
'/nix/store/kdpzhf164h60qh6zpyxwv680pch61dm6-go-1.16-darwin-amd64-bootstrap.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-38297    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2022-23806    9.1'
'https://nvd.nist.gov/vuln/detail/CVE-2021-39293    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41771    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-41772    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44716    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-23772    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-23773    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-24921    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2022-27191    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-34558    6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44717    4.8'
''
'------------------------------------------------------------------------'
'http-client-0.7.11'
''
'/nix/store/l006vmkj3gci6isxymagbwkk0akjhqxa-http-client-0.7.11.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5'
''
'------------------------------------------------------------------------'
'http-client-0.7.11-r1.cabal'
''
'/nix/store/w83lgsiwskrb9armh1148n9kd53i4ahv-http-client-0.7.11-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2020-11021    7.5'
''
'------------------------------------------------------------------------'
'lens-5.0.1'
''
'/nix/store/39vlx7gy370l2yqyhzyjvnvrvllpvfsp-lens-5.0.1.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44458    9.6'
'https://nvd.nist.gov/vuln/detail/CVE-2021-23154    7.8'
''
'------------------------------------------------------------------------'
'lens-5.0.1-r3.cabal'
''
'/nix/store/46s7nqs3lwl376qx7qilsx62p3afyfrs-lens-5.0.1-r3.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44458    9.6'
'https://nvd.nist.gov/vuln/detail/CVE-2021-23154    7.8'
''
'------------------------------------------------------------------------'
'lua-2.1.0'
''
'/nix/store/y65544whk22yj3psbbr54dxzkl18ydjy-lua-2.1.0.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1'
'https://nvd.nist.gov/vuln/detail/CVE-2020-15888    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2020-15945    5.5'
''
'------------------------------------------------------------------------'
'lua-5.3.6'
''
'/nix/store/dxb0n1s5qcjflls39rlxlgw81lg0547y-lua-5.3.6.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2022-28805    9.1'
''
'------------------------------------------------------------------------'
'network-3.1.2.7'
''
'/nix/store/0d3dy4mdjdks3xdfxby7zw39phcrqrqi-network-3.1.2.7.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35048    9.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35047    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35049    8.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-35050    7.5'
''
'------------------------------------------------------------------------'
'safe-0.3.19'
''
'/nix/store/swi0m84v7g6z4cgv39ax6y8a2r4pnkmc-safe-0.3.19.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2019-11644    7.8'
'https://nvd.nist.gov/vuln/detail/CVE-2021-44751    5.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40834    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-40835    4.3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33596    4.1'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33594    3.5'
'https://nvd.nist.gov/vuln/detail/CVE-2021-33595    3.5'
''
'------------------------------------------------------------------------'
'subversion-1.14.2'
''
'/nix/store/bzp6656fgd4y8kwaq672b901dr349z34-subversion-1.14.2.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2021-21698    7.5'
'https://nvd.nist.gov/vuln/detail/CVE-2017-1000085  6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2020-2304     6.5'
'https://nvd.nist.gov/vuln/detail/CVE-2020-2111     5.4'
'https://nvd.nist.gov/vuln/detail/CVE-2018-1000111  5.3'
''
'------------------------------------------------------------------------'
'zlib-0.6.2.3'
''
'/nix/store/xy1ic7y1pdikqd0gzfvvddgngh3bwycc-zlib-0.6.2.3.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2018-25032    7.5'
''
'------------------------------------------------------------------------'
'zlib-0.6.2.3-r1.cabal'
''
'/nix/store/fh5gc29ak4j556rg22iwbzgxl2d5l7h4-zlib-0.6.2.3-r1.cabal.drv'
'CVE                                                CVSSv3'
'https://nvd.nist.gov/vuln/detail/CVE-2018-25032    7.5'
''
'use --show-whitelisted to see derivations with only whitelisted CVEs

EdenEast / nyx

chore(flake): Automatic flake update #38

Report for `sloth`

Report for `eden`

Report for `pride`

Report for `theman`

EdenEast / nyx

chore(flake): Automatic flake update #38

Report for sloth

Report for eden

Report for pride

Report for theman

Report for `sloth`

Report for `eden`

Report for `pride`

Report for `theman`