What’s Vulnerable › Products

NixOS hydra vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your NixOS hydra version is affected

Latest NixOS hydra vulnerabilities

• CVE-2025-54864 — Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins (CVSS 7.5)
• CVE-2025-54800 — Hydra persistent XSS in build metrics (CVSS 6.1)
• CVE-2025-32435 — Hydra no restricted eval after nix-eval-jobs migration (CVSS 2.6)
• CVE-2024-45049 — Nix Hydra Missing authentication when triggering evaluations (CVSS 7.5)
• CVE-2024-32657 — Hydra has persistent XSS vulnerability serving HTML build outputs (CVSS 5.4)