Skip to content
OpenAdvisories

Product · NixOS

hydra

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.6

    Hydra no restricted eval after nix-eval-jobs migration

    Hydra is a Continuous Integration service for Nix based projects. Evaluation of untrusted non-flake nix code could potentially access secrets that are accessible by the hydra user/group. This should not affect the signing keys, that are owned by the hydra-que…