Skip to content
OpenAdvisories

Product · NixOS

nixpkgs

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-25137 EPSS 10%

    NixOs Odoo database and filestore publicly accessible with default odoo configuration

    The NixOs Odoo package is an open source ERP and CRM system. From 21.11 to before 25.11 and 26.05, every NixOS based Odoo setup publicly exposes the database manager without any authentication. This allows unauthorized actors to delete and download the entire…

    NixOS nixpkgs