Nix-Security-WG / nix-security-tracker

Web service for managing information on vulnerabilities in software distributed through Nixpkgs

Nix-Security-WG/nix-security-tracker Issues

Refactor receiver for allauth.signals.user_sign_up
Updated 15 days ago
Take into account patch information from the derivation
Closed 7 months ago1
False positive: CVE-2021-32490 and others in djvulibre
Closed 7 months ago1
False positive: CVE-2023-27371 in libmicrohttpd
Closed 7 months ago
False positive: CVE-2023-24805 in cups-filters
Closed 7 months ago
False positive: CVE-2023-1972 in binutils
Closed 7 months ago
[Tracking Issue] Long-term performance of the security tracker
Updated 7 months ago1
Bulk CVE ingester is not adapted for production operations
Updated 7 months ago
False positive: CVE-2019-14860, CVE-2019-14900 in fuse
Updated 7 months ago
Exclude particular CPEs from version and package name matching
Updated 7 months ago
False negative: CVE-2023-38470 in avahi
Closed 7 months ago1
Add mergify
Updated 8 months ago1
Track relevant GitHub PRs
Closed 8 months ago1
Handle related GitHub issues
Updated 8 months ago
Parse `.drv` to learn more information about a derivation
Updated 8 months ago
[Tracking Issue] Deployment
Updated 8 months ago
Show derivation metadata inline in admin view
Updated 8 months ago
Extract severity from the `metrics` JSON object
Updated 8 months ago
False positive: CVE-2015-1773 in flex
Updated 8 months ago
Ingest repology CPE bindings for more accurate matching
Updated 8 months ago
False positive: CVE-2006-7246 in networkmanager
Closed 8 months ago1
Improve performance
Updated 8 months ago
Cache parsed NVD collection
Updated 8 months ago
Cache web results per advisory id
Updated 8 months ago
False positive: CVE-2023-45853 in zlib
Updated 8 months ago
False positive: CVE-2023-2975 in openssl
Closed 8 months ago1
False positive: CVE-2019-0190 in openssl
Updated 8 months ago
Managing the deletion of users
Updated 8 months ago
Fetch NVD delta information
Closed 8 months ago1
False positive: CVE-2021-26720 in avahi
Updated 8 months ago1
Cache inventory
Updated 8 months ago
Smarter backoff when hitting NVD rate limits
Updated 8 months ago
Make the short code configurable
Updated 8 months ago
Missing ingestion fields
Updated 8 months ago
False positive: CVE-2015-2987 in ed
Updated 8 months ago
False positive: CVE-2022-26691 in CUPS
Updated 8 months ago
Take into account affected version ranges from advisories
Closed 8 months ago2
False positive: CVE-2023-3341 (and 7 more) in bind
Updated 8 months ago
False positive: wrong match on jenkins git plugin
Updated 8 months ago1
False positive: CVE-2023-3164 in gawk
Closed 8 months ago1
False positive: CVE-2023-3618 in libtiff
Closed 8 months ago1
False positive: CVE-2023-2908 in libtiff
Closed 8 months ago1
False positive: CVE-2023-3576 in libtiff
Closed 8 months ago1
False postive: CVE-2023-32665 in glib
Closed 8 months ago1
False positive: CVE-2023-32611 in glib
Closed 8 months ago1
[Tracking Issue] Nixpkgs data issue
Updated 8 months ago
False positives: various in 'kernel-modules' and 'glibc-locales'
Updated 8 months ago1
False positive: CVE-2023-43789 in libXpm
Closed 8 months ago
False positive: CVE-2023-43787 in libX11
Closed 8 months ago
False positive: CVE-2023-41175 in libtiff
Closed 8 months ago