github-actions[bot]
commented
2 months ago Report for marlon
Version changes:
Security vulnerability report
50 derivations with active advisories 8 derivations left out due to whitelisting ------------------------------------------------------------------------ ShellCheck-0.10.0 /nix/store/28j7hy7j7rz8sbzfh2kigpx370w6dg86-ShellCheck-0.10.0.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8 ------------------------------------------------------------------------ aardvark-dns-1.12.1 /nix/store/0s07nyhlpiqdr4ikmss0w1i56ip1fkwl-aardvark-dns-1.12.1.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2024-8418 7.5 ------------------------------------------------------------------------ audiofile-0.3.6 /nix/store/8i6zds8gv6ni8202r0npari0y9xzqjmj-audiofile-0.3.6.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2020-18781 5.5 ------------------------------------------------------------------------ cereal-0.5.8.3 /nix/store/cd6cddw8lxiin97yw2wnmmhw40n2ypxy-cereal-0.5.8.3.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2020-11105 9.8 https://nvd.nist.gov/vuln/detail/CVE-2020-11104 5.3 ------------------------------------------------------------------------ commonmark-0.2.6 /nix/store/ml4wf4w7qgivqg8mdr1q0iggsc88a5yv-commonmark-0.2.6.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2019-10010 6.1 ------------------------------------------------------------------------ cups-2.4.10 /nix/store/kv0raa6n8bzxxd920klq7qcg4y3n4y86-cups-2.4.10.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7 ------------------------------------------------------------------------ dbus-1 /nix/store/60wydzcd80nylqjlmkm8jbj12cm548z6-dbus-1.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5 https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5 https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5 ------------------------------------------------------------------------ fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9 /nix/store/cfvz2yimqjr5ls2jn60gks3qm9bfl3y3-fuse-2.9.9-closefrom-glibc-2-34.patch?id=8a970396fca7aca2d5a761b8e7a8242f1eef14c9.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5 https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5 ------------------------------------------------------------------------ fuse-3.16.2 /nix/store/62hhzsanj4hw92r9lvysrvq63zfahj08-fuse-3.16.2.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2019-14860 6.5 https://nvd.nist.gov/vuln/detail/CVE-2019-14900 6.5 ------------------------------------------------------------------------ gcc-13.3.0 /nix/store/fkk73ndvkaz2hkjvazp3s412pb52kakk-gcc-13.3.0.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8 ------------------------------------------------------------------------ git-2.46.0 /nix/store/g7mhkv3cs9mj9h67bmwmnnhpwk427il5-git-2.46.0.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5 https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1 https://nvd.nist.gov/vuln/detail/CVE-2020-2136 5.4 https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3 https://nvd.nist.gov/vuln/detail/CVE-2019-1003010 4.3 ------------------------------------------------------------------------ go-1.21.0-linux-amd64-bootstrap /nix/store/1w5mfqsbqx54xfb3zbhf1ryzaqwb3807-go-1.21.0-linux-amd64-bootstrap.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-39320 9.8 https://nvd.nist.gov/vuln/detail/CVE-2024-24790 9.8 https://nvd.nist.gov/vuln/detail/CVE-2023-39323 8.1 https://nvd.nist.gov/vuln/detail/CVE-2023-39321 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-39322 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-39325 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-44487 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-39318 6.1 https://nvd.nist.gov/vuln/detail/CVE-2023-39319 6.1 https://nvd.nist.gov/vuln/detail/CVE-2024-24789 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8 ------------------------------------------------------------------------ go-1.22.6 /nix/store/12p4myq9yrziavblqxnxn799kadbjalp-go-1.22.6.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.8 ------------------------------------------------------------------------ hedgehog-1.4 /nix/store/afnz99k2vfyd6fygal0ifl0wzv14nn29-hedgehog-1.4.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8 ------------------------------------------------------------------------ hedgehog-1.4-r8.cabal /nix/store/5m68ia8f5inbhkza1v8mfjddn4a2x5y6-hedgehog-1.4-r8.cabal.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-4276 8.8 ------------------------------------------------------------------------ http-client-0.7.17 /nix/store/ysb8ncj66kbmmxskbbzs96wzxb3a2gmj-http-client-0.7.17.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2020-11021 7.5 ------------------------------------------------------------------------ jbig2dec-0.20 /nix/store/x1sqwy7skbwgb7yycnfgpyg528h4ry3a-jbig2dec-0.20.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5 ------------------------------------------------------------------------ libmemcached-1.0.18 /nix/store/i8x33vd61085kfix7srri5hzh06h0w5b-libmemcached-1.0.18.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5 ------------------------------------------------------------------------ libmpeg2-0.5.1 /nix/store/pwpi5bmxga2if363nry1aw7qvpyzxj26-libmpeg2-0.5.1.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5 ------------------------------------------------------------------------ lodepng-3.10.1 /nix/store/il8ymdgr2gl3m32hdfdzc3i8gfmwds1s-lodepng-3.10.1.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2019-17178 7.5 ------------------------------------------------------------------------ network-3.1.4.0 /nix/store/f8wmym8cwcl10jp659xkwjsr41rdh9vl-network-3.1.4.0.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-35048 9.8 https://nvd.nist.gov/vuln/detail/CVE-2021-35047 8.8 https://nvd.nist.gov/vuln/detail/CVE-2021-35049 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24388 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24389 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24390 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24391 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24392 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24393 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24394 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-0486 7.8 https://nvd.nist.gov/vuln/detail/CVE-2022-0997 7.8 https://nvd.nist.gov/vuln/detail/CVE-2021-35050 7.5 ------------------------------------------------------------------------ network-3.1.4.0-r1.cabal /nix/store/74rzi1kcbdf0k1m8c5vr4ljf4a1apk0q-network-3.1.4.0-r1.cabal.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-35048 9.8 https://nvd.nist.gov/vuln/detail/CVE-2021-35047 8.8 https://nvd.nist.gov/vuln/detail/CVE-2021-35049 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24388 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24389 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24390 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24391 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24392 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24393 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-24394 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-0486 7.8 https://nvd.nist.gov/vuln/detail/CVE-2022-0997 7.8 https://nvd.nist.gov/vuln/detail/CVE-2021-35050 7.5 ------------------------------------------------------------------------ ninja-1.12.1 /nix/store/znflsi8ifra43452vzfbsrx541h0cwyp-ninja-1.12.1.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-4336 9.8 ------------------------------------------------------------------------ oh-my-zsh-2024-08-27 /nix/store/zllmshb2ryl0q29ki1qq2h09dbrfl8bs-oh-my-zsh-2024-08-27.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-3727 9.8 ------------------------------------------------------------------------ openvpn-2.6.12 /nix/store/d4fijh6ia0q11n2vzfq57xrvmxgila7p-openvpn-2.6.12.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2020-27569 7.5 ------------------------------------------------------------------------ pip-20.3.4-source /nix/store/vn6nx0826p50v24p7qg6sv1jpwf1qnic-pip-20.3.4-source.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7 https://nvd.nist.gov/vuln/detail/CVE-2023-5752 3.3 ------------------------------------------------------------------------ polkit-1.pam /nix/store/80n075bwddhlxfhc50myy0r2xh2xgq6a-polkit-1.pam.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8 ------------------------------------------------------------------------ procps-3.3.17-binlore /nix/store/03fh3wzy0ja5269nfjish2hw0mdlhgxz-procps-3.3.17-binlore.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-4016 3.3 ------------------------------------------------------------------------ procps-3.3.17-lore-override /nix/store/dbw12ba5fwgfkpjd6xl86zll20ayhmqq-procps-3.3.17-lore-override.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-4016 3.3 ------------------------------------------------------------------------ python-2.7.18.8 /nix/store/hmiijzpqz73dgs7jr9lvkv6yiavbzjqx-python-2.7.18.8.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-48565 9.8 https://nvd.nist.gov/vuln/detail/CVE-2019-9674 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-0391 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-45061 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-48560 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-24329 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-36632 7.5 https://nvd.nist.gov/vuln/detail/CVE-2024-6232 7.5 https://nvd.nist.gov/vuln/detail/CVE-2024-7592 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-26488 7.0 https://nvd.nist.gov/vuln/detail/CVE-2021-3733 6.5 https://nvd.nist.gov/vuln/detail/CVE-2022-48564 6.5 https://nvd.nist.gov/vuln/detail/CVE-2021-23336 5.9 https://nvd.nist.gov/vuln/detail/CVE-2022-48566 5.9 https://nvd.nist.gov/vuln/detail/CVE-2023-40217 5.3 ------------------------------------------------------------------------ quote-1.0.36 /nix/store/x4dylylvrrj9pix92hbpmg0jsi0ijkpn-quote-1.0.36.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2020-16194 5.3 ------------------------------------------------------------------------ rubygems-3.5.16 /nix/store/741nm0pyh022cdnyavng47y9j6s4wix5-rubygems-3.5.16.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.8 ------------------------------------------------------------------------ safe-0.3.21 /nix/store/63z2154ywqk9yzvc2l5a0q9jiqyv3a88-safe-0.3.21.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-28872 8.8 https://nvd.nist.gov/vuln/detail/CVE-2019-11644 7.8 https://nvd.nist.gov/vuln/detail/CVE-2022-38164 6.5 https://nvd.nist.gov/vuln/detail/CVE-2022-47524 5.4 https://nvd.nist.gov/vuln/detail/CVE-2021-44751 5.3 https://nvd.nist.gov/vuln/detail/CVE-2021-40834 4.3 https://nvd.nist.gov/vuln/detail/CVE-2021-40835 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-28868 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-28869 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-28870 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-28873 4.3 https://nvd.nist.gov/vuln/detail/CVE-2021-33596 4.1 https://nvd.nist.gov/vuln/detail/CVE-2021-33594 3.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33595 3.5 https://nvd.nist.gov/vuln/detail/CVE-2022-38163 3.5 ------------------------------------------------------------------------ safe-0.3.21-r1.cabal /nix/store/5b96a8chlvh6bvbhpx9fj61xi1q4wwwi-safe-0.3.21-r1.cabal.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-28872 8.8 https://nvd.nist.gov/vuln/detail/CVE-2019-11644 7.8 https://nvd.nist.gov/vuln/detail/CVE-2022-38164 6.5 https://nvd.nist.gov/vuln/detail/CVE-2022-47524 5.4 https://nvd.nist.gov/vuln/detail/CVE-2021-44751 5.3 https://nvd.nist.gov/vuln/detail/CVE-2021-40834 4.3 https://nvd.nist.gov/vuln/detail/CVE-2021-40835 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-28868 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-28869 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-28870 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-28873 4.3 https://nvd.nist.gov/vuln/detail/CVE-2021-33596 4.1 https://nvd.nist.gov/vuln/detail/CVE-2021-33594 3.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33595 3.5 https://nvd.nist.gov/vuln/detail/CVE-2022-38163 3.5 ------------------------------------------------------------------------ samba-4.20.4 /nix/store/gk7384161dmp7vi3vm765ki9jss70nda-samba-4.20.4.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-37966 8.1 https://nvd.nist.gov/vuln/detail/CVE-2022-38023 8.1 https://nvd.nist.gov/vuln/detail/CVE-2022-32743 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-37967 7.2 https://nvd.nist.gov/vuln/detail/CVE-2021-3670 6.5 https://nvd.nist.gov/vuln/detail/CVE-2022-1615 5.5 ------------------------------------------------------------------------ sassc-3.6.2 /nix/store/jzx01izqmq4kh7wln29f3c3f1862ykys-sassc-3.6.2.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5 ------------------------------------------------------------------------ setuptools-44.0.0-source /nix/store/2qgk79a0kazqyhghx1w5c5cb6vwc9as9-setuptools-44.0.0-source.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9 ------------------------------------------------------------------------ unzip-6.0 /nix/store/03dvx39sdpvybbi6psky85ab413zgi80-unzip-6.0.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-4217 3.3 ------------------------------------------------------------------------ vault-0.3.1.5 /nix/store/wza5fbrprzmm37s3ic2kb7pi2hwha6xj-vault-0.3.1.5.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-24999 8.1 https://nvd.nist.gov/vuln/detail/CVE-2020-13223 7.5 https://nvd.nist.gov/vuln/detail/CVE-2021-27400 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-6337 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-0620 6.7 https://nvd.nist.gov/vuln/detail/CVE-2023-0665 6.5 https://nvd.nist.gov/vuln/detail/CVE-2024-8365 6.5 https://nvd.nist.gov/vuln/detail/CVE-2021-41802 5.4 https://nvd.nist.gov/vuln/detail/CVE-2023-2121 5.4 https://nvd.nist.gov/vuln/detail/CVE-2020-25594 5.3 https://nvd.nist.gov/vuln/detail/CVE-2021-3024 5.3 https://nvd.nist.gov/vuln/detail/CVE-2021-38554 5.3 https://nvd.nist.gov/vuln/detail/CVE-2022-41316 5.3 https://nvd.nist.gov/vuln/detail/CVE-2023-25000 4.7 ------------------------------------------------------------------------ vault-0.3.1.5-r7.cabal /nix/store/740i9rm23im41x9vbk5lw8jxfr4jdcr2-vault-0.3.1.5-r7.cabal.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-24999 8.1 https://nvd.nist.gov/vuln/detail/CVE-2020-13223 7.5 https://nvd.nist.gov/vuln/detail/CVE-2021-27400 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-6337 7.5 https://nvd.nist.gov/vuln/detail/CVE-2023-0620 6.7 https://nvd.nist.gov/vuln/detail/CVE-2023-0665 6.5 https://nvd.nist.gov/vuln/detail/CVE-2024-8365 6.5 https://nvd.nist.gov/vuln/detail/CVE-2021-41802 5.4 https://nvd.nist.gov/vuln/detail/CVE-2023-2121 5.4 https://nvd.nist.gov/vuln/detail/CVE-2020-25594 5.3 https://nvd.nist.gov/vuln/detail/CVE-2021-3024 5.3 https://nvd.nist.gov/vuln/detail/CVE-2021-38554 5.3 https://nvd.nist.gov/vuln/detail/CVE-2022-41316 5.3 https://nvd.nist.gov/vuln/detail/CVE-2023-25000 4.7 ------------------------------------------------------------------------ warp-3.3.31 /nix/store/ysq6bxlyv68d1xzy5flwfaql30v3k3gr-warp-3.3.31.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-3320 9.8 https://nvd.nist.gov/vuln/detail/CVE-2022-3512 8.8 https://nvd.nist.gov/vuln/detail/CVE-2022-4428 8.0 https://nvd.nist.gov/vuln/detail/CVE-2022-2145 7.8 https://nvd.nist.gov/vuln/detail/CVE-2022-2225 7.8 https://nvd.nist.gov/vuln/detail/CVE-2023-0652 7.8 https://nvd.nist.gov/vuln/detail/CVE-2023-1412 7.8 https://nvd.nist.gov/vuln/detail/CVE-2023-1862 7.3 https://nvd.nist.gov/vuln/detail/CVE-2023-2754 6.8 https://nvd.nist.gov/vuln/detail/CVE-2022-4457 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-0238 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-0654 3.7 ------------------------------------------------------------------------ wheel-0.37.1-source /nix/store/7sm5bzb59dafwk8rj5bqvjzpx251chwn-wheel-0.37.1-source.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5 ------------------------------------------------------------------------ xdg-utils-1.2.1 /nix/store/k99j8vyz4whsrxh7mv702b8bzbyd35q2-xdg-utils-1.2.1.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2020-27748 6.5 ------------------------------------------------------------------------ yaml-0.11.11.2 /nix/store/b8k0kq9vx4iq0lxs9nqjnsh9ard5vkhm-yaml-0.11.11.2.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5 https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5 ------------------------------------------------------------------------ yaml-0.11.11.2-r2.cabal /nix/store/yg0d6yl4a8blp1lxnx2hlpnk5xvicjvp-yaml-0.11.11.2-r2.cabal.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5 https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5 ------------------------------------------------------------------------ yara-4.5.0 /nix/store/30x3z3pcnbzdhh31678vdlk496jvdyvh-yara-4.5.0.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-45429 5.5 ------------------------------------------------------------------------ yasm-1.3.0 /nix/store/20l221rfvy85j0pbpa29afip9xysmvi6-yasm-1.3.0.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2021-33454 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33455 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33456 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33457 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33458 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33459 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33460 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33461 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33462 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33463 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33464 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33465 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33466 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33467 5.5 https://nvd.nist.gov/vuln/detail/CVE-2021-33468 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-30402 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-31972 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-31973 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-31974 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-51258 5.5 https://nvd.nist.gov/vuln/detail/CVE-2023-31975 3.3 ------------------------------------------------------------------------ zlib-0.6.3.0 /nix/store/7rnx7fgby145gszi75a4lg7wd38rqzds-zlib-0.6.3.0.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8 https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5 ------------------------------------------------------------------------ zlib-0.6.3.0-r5.cabal /nix/store/piy096kvsgzmx5mbhm8kzmjykl336cx3-zlib-0.6.3.0-r5.cabal.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8 https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5 ------------------------------------------------------------------------ zlib-1.3.1 /nix/store/4gw9bs30lgjylxn5wvzzscw4b5blijmi-zlib-1.3.1.drv CVE CVSSv3 https://nvd.nist.gov/vuln/detail/CVE-2023-6992 5.5 use --show-whitelisted to see derivations with only whitelisted CVEs
This PR contains the following updates:
🔧 This Pull Request updates lock files to use the latest dependency versions.
Configuration
📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.