Skip to content
OpenAdvisories

Product · NixOS

hydra

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-54800

    Hydra persistent XSS in build metrics

    Hydra is a continuous integration service for Nix based projects. Prior to commit dea1e16, a malicious package can introduce arbitrary JavaScript code into the Hydra database that is automatically evaluated in a client's browser when anyone visits the build p…

    NixOS hydra
  • High 7.5
    CVE-2024-45049

    Nix Hydra Missing authentication when triggering evaluations

    Hydra is a Continuous Integration service for Nix based projects. It is possible to trigger evaluations in Hydra without any authentication. Depending on the size of evaluations, this can impact the availability of systems. The problem can be fixed by applyin…

    NixOS hydra