pkgs/development/

pkgs/ · 11741 packages and modules · 2873 open pull requests

ci/OWNERS

Busy below

python-modules 1897 · libraries 325 · compilers 251 · tools 137 · interpreters 114 · ocaml-modules 70 · haskell-modules 63 · cuda-modules 30 · ruby-modules 19 · web 16 · lua-modules 13 · node-packages 13 · r-modules 13 · misc 11 · rocm-modules 10 · rocq-modules 9 · lisp-modules 8 · tcl-modules 8 · coq-modules 7 · embedded 7 · perl-modules 7 · beam-modules 6 · mobile 6 · octave-modules 6 · php-packages 5 · julia-modules 4 · ada-modules 3 · androidndk-pkgs 3 · skaware-packages 3 · gnuradio-modules 2 · hare-third-party 2 · idris-modules 2 · openscad-packages 2 · dotnet-modules 1 · em-modules 1 · java-modules 1 · lean-modules 1 · lisp-modules-new 1 · nim-packages 1 · satysfi-packages 1

Packages and modules 11741

python3Packages.mistune_2risk 74 15 advisories no maintainer 0 0

python3Packages.tornadorisk 74 6 advisories no maintainer 2 4

python3Packages.sqlparserisk 74 5 advisories no maintainer 0 1

python3Packages.exiv2risk 68 9 advisories 0 0

python3Packages.bentomlrisk 68 8 advisories 0 0

python3Packages.docling-slimrisk 68 8 advisories 0 0

python3Packages.monairisk 68 6 advisories 2 2

python3Packages.fschatrisk 68 6 advisories 0 0

python3Packages.transformers_4risk 68 6 advisories 0 0

python3Packages.chromadbrisk 68 4 advisories 1 0

python3Packages.hydra-corerisk 68 3 advisories 1 0

python3Packages.ormarrisk 68 2 advisories 0 0

python3Packages.pymongorisk 66 4 advisories no maintainer 1 0

python3Packages.sqlalchemy_1_4risk 66 3 advisories no maintainer 1 0

python3Packages.thriftrisk 64 3 advisories 1 3

popplerrisk 63 5 advisories upstream 26.10.0 2 3

poppler_minrisk 63 5 advisories upstream 26.10.0 2 1

python3Packages.gitpythonrisk 60 8 advisories 0 2

python3Packages.django-cmsrisk 60 6 advisories 1 0

python3Packages.httpx2risk 60 5 advisories 0 1

python3Packages.urllib3risk 60 3 advisories 0 3

python3Packages.snorkelrisk 60 3 advisories 0 0

python3Packages.unstructuredrisk 58 2 advisories 1 1

python3Packages.snowflake-connector-pythonrisk 56 2 advisories no maintainer 2 0

python3Packages.diskcacherisk 54 1 advisory no maintainer 0 0

python3Packages.sqlitedictrisk 54 1 advisory no maintainer 0 0

radare2risk 52 4 advisories 2 1

python3Packages.graphite-webrisk 47 5 advisories 4 0

python3Packages.weasyprintrisk 43 2 advisories 1 1

python3Packages.psd-toolsrisk 43 2 advisories 0 1

python3Packages.sagemakerrisk 41 2 advisories no maintainer 0 1

cairosvgrisk 41 1 advisory upstream 2.9.1 0 1

doclingrisk 41 1 advisory upstream 2.129.0 0 1

vllmrisk 40 7 advisories 6 1

python3Packages.redshift-connectorrisk 40 1 advisory 1 0

python3Packages.pymetasploit3risk 40 1 advisory 0 0

virtualenvrisk 39 1 advisory upstream 21.14.8 no maintainer 0 1

python3Packages.intakerisk 39 1 advisory no maintainer 1 0

python3Packages.ecdsarisk 39 1 advisory no maintainer 0 0

python3Packages.pdfkitrisk 39 1 advisory no maintainer 0 0

janetrisk 36 2 advisories upstream 1.42.1 2 0

python3Packages.strawberry-graphqlrisk 36 2 advisories 1 0

glibcrisk 35 3 advisories 19 7

poppler-utilsrisk 33 1 advisory upstream 26.10.0 2 1

datamodel-code-generatorrisk 33 1 advisory 1 1

python3Packages.lxml-html-cleanrisk 33 1 advisory 1 0

python3Packages.protobuf4risk 31 1 advisory no maintainer 1 0

python3Packages.snowflake-sqlalchemyrisk 31 1 advisory no maintainer 1 0

python3Packages.git-url-parserisk 31 1 advisory no maintainer 0 0

python3Packages.pyjwtrisk 28 2 advisories 0 1

python3Packages.djangorestframework_3_17risk 26 2 advisories no maintainer 0 0

python3Packages.soupsieverisk 26 2 advisories no maintainer 0 0

litestarrisk 26 1 advisory upstream 2.24.0 2 1

python3Packages.simpleevalrisk 25 1 advisory 1 0

python3Packages.httpcore2risk 25 1 advisory 0 0

python3Packages.nltkrisk 25 1 advisory 0 0

python3Packages.makorisk 24 1 advisory no maintainer 1 1

python3Packages.twistedrisk 24 1 advisory no maintainer 2 0

python3Packages.jwcryptorisk 24 1 advisory no maintainer 0 1

python3Packages.webobrisk 24 1 advisory no maintainer 0 1

python3Packages.pypdf2risk 24 1 advisory no maintainer 0 0

python3Packages.python-joserisk 24 1 advisory no maintainer 0 0

litellmrisk 23 3 advisories upstream 1.105.1 1 2

aspellrisk 21 3 advisories no maintainer 1 1

python3Packages.oauthlibrisk 20 2 advisories 0 1

python3Packages.html5librisk 20 2 advisories 0 0

python3Packages.python-aptrisk 20 2 advisories 0 0

flatpak-builderrisk 19 1 advisory upstream 1.4.12 no maintainer 0 1

opamrisk 19 1 advisory upstream 2.6.1 no maintainer 1 0

python3Packages.capstone_4risk 18 1 advisory 2 0

python3Packages.multidictrisk 18 1 advisory 0 1

squeakrisk 18 upstream 6.1 no maintainer 1 1

hjsonrisk 18 upstream 4.7.1 no maintainer 0 0

jlrisk 18 upstream 1.6.0 no maintainer 0 0

json2yamlrisk 18 upstream 1.2.0 no maintainer 0 0

litrisk 18 upstream 23.1.3 no maintainer 0 0

luabindrisk 18 upstream 1.1.1 no maintainer 0 0

twinerisk 18 upstream 7.0.0 no maintainer 0 0

xapian-omegarisk 18 upstream 2.1.0 no maintainer 0 0

appriserisk 17 1 advisory upstream 2.0.1 2 0

squirrel-sqlrisk 16 2 advisories no maintainer 1 0

python3Packages.pycryptorisk 16 2 advisories no maintainer 0 0

python3Packages.pydantic-settingsrisk 16 1 advisory no maintainer 3 0

python3Packages.mariadbrisk 16 1 advisory no maintainer 1 1

python3Packages.piprisk 16 1 advisory no maintainer 1 0

python3Packages.autobahnrisk 16 1 advisory no maintainer 0 0

python3Packages.flask-httpauthrisk 16 1 advisory no maintainer 0 0

python3Packages.h2risk 16 1 advisory no maintainer 0 0

python3Packages.werkzeugrisk 16 1 advisory no maintainer 0 0

openblasrisk 14 upstream 0.3.34 no maintainer 2 3

moleculerisk 14 upstream 26.10.0 no maintainer 3 0

aqbankingrisk 14 upstream 6.9.2 no maintainer 2 0

libusb-compat-0_1risk 14 upstream 0.1.9 no maintainer 2 0

mypyrisk 14 upstream 2.4.0 no maintainer 2 0

pyocdrisk 14 upstream 0.45.0 no maintainer 2 0

readlinerisk 14 upstream 8.3p6 no maintainer 2 0

appstreamrisk 14 upstream 1.2.1 no maintainer 1 0

automakerisk 14 upstream 1.19 no maintainer 1 0

codonrisk 14 upstream 0.20.3 no maintainer 0 1

fastapi-clirisk 14 upstream 0.0.32 no maintainer 1 0

11641 more in the JSON API

Pull requests 2873

home-assistant-custom-components.homematicip_local: 2.11.1 -> 2.12.0

#574921 by dotlambda · opened 1h ago · checks pass

python3Packages.django-health-check: 4.8.0 -> 4.10.0

#574910 by r-ryantm · opened 2h ago · checks pass

python3Packages.django-hijack: 3.7.9 -> 3.8.0

#574885 by r-ryantm · opened 3h ago · checks pass

python3Packages.scipy: Fix cross compilation pulling in native python

#574883 by rosscarter154 · opened 3h ago · checks pass

python3Packages.credsweeper: 1.19.2 -> 1.19.3

#574881 by r-ryantm · opened 3h ago · checks pass

python3Packages.pywiim: 2.3.9 -> 2.3.11

#574880 by r-ryantm · opened 3h ago · checks pass

luaPackages.cqueues: install for the selected Lua interpreter

#574857 by khaneliman · opened 4h ago · checks pass

python3Packages.xknx: 3.20.0 -> 4.0.0

#574852 by r-ryantm · opened 5h ago · checks pass

python3Packages.dendropy: 5.1.0 -> 5.1.1

#574841 by r-ryantm · opened 5h ago · checks pass

python3Packages.spglib: 2.7.0 -> 2.8.0

#574837 by r-ryantm · opened 6h ago · checks pass

python3Packages.azure-mgmt-keyvault: 14.0.1 -> 14.1.0

#574828 by r-ryantm · opened 6h ago · checks pass

python3Packages.fastrlock: 0.8.3 -> 0.8.4

#574822 by r-ryantm · opened 6h ago · checks pass

python3Packages.tensorly: 0.9.0 -> 0.10.0

#574817 by r-ryantm · opened 6h ago · checks pass

python3Packages.coiled: 1.135.4 -> 1.135.6

#574803 by r-ryantm · opened 7h ago · checks pass

python3Packages.pysatochip: 0.18.0 -> 0.18.5

#574800 by r-ryantm · opened 7h ago · checks pass

python3Packages.pvextractor: 0.4 -> 0.5

#574797 by r-ryantm · opened 8h ago · checks pass

python3Packages.langgraph-checkpoint-mongodb: 0.5.0 -> 0.5.1

#574785 by r-ryantm · opened 8h ago · checks pass

python3Packages.google-cloud-netapp: 0.10.2 -> 0.10.3

#574780 by r-ryantm · opened 9h ago · checks pass

python3Packages.garminconnect: 0.3.17 -> 0.3.18

#574764 by r-ryantm · opened 10h ago · checks pass

python3Packages.libknot: 3.6.0 -> 3.6.1

#574735 by r-ryantm · opened 11h ago · checks pass

python3Packages.whool: 1.3 -> 1.3.1

#574731 by r-ryantm · opened 12h ago · checks pass

python3Packages.hiredis: 3.4.2 -> 3.5.0

#574720 by r-ryantm · opened 12h ago · checks pass

python3Packages.rchitect: 0.4.10 -> 0.5.2, python3Packages.radian: 0.6.15 -> 0.7.1, radianWrapper: Convert to structuredAttrs

#574718 by savyajha · opened 12h ago · checks pass

python3Packages.tokenizers: fixed forced Rust system packages

#574709 by RossSmyth · opened 13h ago · checks pass

python3Packages.pybigwig: 0.3.26 -> 0.3.28

#574700 by r-ryantm · opened 14h ago · checks pass

python3Packages.llama-cloud: 2.16.0 -> 2.18.0

#574699 by r-ryantm · opened 14h ago · checks pass

ocamlPackages.*: convert all sha256 to hash in all fetchers

#574698 by ShadowRZ · opened 14h ago · checks pass

{octave,perl,php}Packages.*: convert all sha256 to hash in all fetchers

#574685 by ShadowRZ · opened 15h ago · checks pass

python3Packages.types-regex: 2026.9.10.20260911 -> 2026.9.29.20261005

#574669 by r-ryantm · opened 17h ago · checks pass

python3Packages.flashinfer-python: 0.7.1 -> 0.7.2

#574635 by GaetanLepage · opened 20h ago · checks pass

python3Packages.flashinfer-jit-cache: init at 0.6.17

#574632 by GaetanLepage · opened 20h ago · checks pass

python3Packages.meshcore: 2.3.15 -> 2.3.16

#574629 by r-ryantm · opened 20h ago · checks pass

python3Packages.withings-sync: 6.0.2 -> 6.1.0

#574626 by r-ryantm · opened 21h ago · checks pass

python3Packages.gradient: drop

#574624 by SuperSandro2000 · opened 21h ago · checks pass

python3Packages.gradient-utils: drop

#574623 by SuperSandro2000 · opened 21h ago · checks pass

python3Packages.epaper-dithering: 6.0.0 -> 6.1.1

#574619 by r-ryantm · opened 21h ago · checks pass

python3Packages.py-unifi-access: 1.6.1 -> 1.6.2

#574618 by r-ryantm · opened 21h ago · checks pass

openssl: add configure target for aarch64

#574615 by xyven1 · opened 21h ago · checks pass

rust: 1.99.0 -> 1.99.1

#574572 by whispersofthedawn · opened 23h ago · checks pass

cudaPackages.cuda_nvcc: wrap nvlink to remove references to the Nix store from its output draft

#574566 by ConnorBaker · opened 23h ago · checks pass

julia_113{,-bin}: 1.13.1 -> 1.13.2

#574553 by taranarmo · opened 1d ago · checks pass

python3Packages.betterproto2: init at 0.10.0

#574550 by lennartmueh · opened 1d ago · checks pass

python3Packages.pydantic-settings: 2.14.2 -> 2.16.0

#574521 by lennartmueh · opened 1d ago · checks pass

python3Packages.botocore-stubs: 1.43.112 -> 1.43.114

#574497 by r-ryantm · opened 1d ago · checks pass

beamPackages.hex: refactor to use buildMix draft

#574465 by adamcstephens · opened 1d ago · checks fail

boost*: convert all sha256 to hash in all fetchers draft

#574459 by ShadowRZ · opened 1d ago · checks pass

pkgs/development/libraries/kde-frameworks/*: convert all sha256 to hash in fetchurl

#574441 by ShadowRZ · opened 1d ago · checks pass

python3Packages.ufolib2: 0.18.1 -> 0.19.1

#574440 by r-ryantm · opened 1d ago · checks pass

nodejs: remove redundent configure flags

#574436 by aduh95 · opened 1d ago · checks pass

zlib: do not put both static and shared libdir in `zlib.pc`

#574432 by aduh95 · opened 1d ago · checks pass

python3Packages.drf-spectacular-sidecar: stop the churn on automated …

#574417 by SuperSandro2000 · opened 1d ago · checks pass

python3Packages.dunamai: 1.26.2 -> 1.26.3

#574373 by me-and · opened 1d ago · checks pass

python3Packages.kopf: 1.44.6 -> 1.45.1

#574365 by SkohTV · opened 1d ago · checks pass

dotnet: October 2026 SDK channel updates (8.0, 9.0, 10.0, 11.0)

#574338 by asmundo · opened 1d ago · checks pass

python3Packages.tensorflow: convert all sha256 to hash in fetchurl

#574329 by ShadowRZ · opened 1d ago · checks pass

python3Packages.scikit-learn: 1.9.0 -> 1.9.1

#574275 by dotlambda · opened 1d ago · checks pass

python3Packages.pylsp-mypy: 0.8.0 -> 0.8.2

#574269 by r-ryantm · opened 1d ago · checks pass

python3Packages.altcha: 2.2.0 -> 2.3.0

#574230 by r-ryantm · opened 1d ago · checks pass

python3Packages.{numba,numba-cuda,cuda-bindings}: find libcuda in cuda_compat's compat dir

#574225 by ConnorBaker · opened 1d ago · checks pass

crystalline: 0.18.0 -> 0.20.0

#574217 by mdaniels5757 · opened 1d ago · checks pass

python3Packages.pyperscan: 0.3.0 -> 0.4.0

#574202 by r-ryantm · opened 1d ago · checks pass

jetbrains.jdk: 25.0.3-b508.4 -> 25.0.4.1-b635.72

#574181 by aoli-al · opened 1d ago · checks pass

python3Packages.microsoft-kiota-serialization-form: 1.14.2 -> 1.14.4

#574173 by r-ryantm · opened 1d ago · checks pass

python3Packages.lzallright: 0.2.6 -> 0.3.0

#574162 by r-ryantm · opened 1d ago · checks pass

crystal_1_21: 1.21.0 -> 1.21.1

#574156 by mdaniels5757 · opened 1d ago · checks pass

treewide: install upstream AppStream metainfo (Rust packages)

#574150 by KiaraGrouwstra · opened 1d ago · checks pass

python3Packages.pygobject3: avoid leaking native python when cross compiling

#574145 by rosscarter154 · opened 1d ago · checks pass

python3Packages.filelock: 3.32.4 -> 4.1.2

#574125 by dotlambda · opened 1d ago · checks pass

cudaPackages.cuda_nvcc: link nvvm/lib64 to lib before CUDA 13

#574119 by ConnorBaker · opened 1d ago · checks pass

cudaPackages.cudnn_jit: init at 9.27.0.42

#574104 by ConnorBaker · opened 1d ago · checks pass

cudaPackages.libcublas: use standalone cuBLAS releases draft

#574103 by ConnorBaker · opened 1d ago · checks pass

luaPackages: update on 2026-10-14

#574101 by khaneliman · opened 1d ago · checks pass

python3Packages.xyzservices: 2026.3.0 -> 2026.9.1 draft

#574082 by autra · opened 2d ago · checks pass

python3Packages.parsedmarc: 11.0.2 -> 11.0.3

#574060 by r-ryantm · opened 2d ago · checks pass

python3Packages.pytest-django_4_12: 4.12.0 -> 4.14.0 draft

#574059 by r-ryantm · opened 2d ago · checks pass

python3Packages.django-embed-video: init at 1.4.10

#574056 by grindhold · opened 2d ago · checks pass

php: enable strictDeps and __structuredAttrs on unwrapped derivation

#574046 by piotrkwiecinski · opened 2d ago · checks pass

gnatPackages.gnatprove: report unsupported GNAT via meta.problems

#574045 by zhmgczh · opened 2d ago · checks pass

python3Packages.datafusion: 54.0.0 -> 55.0.0

#574044 by r-ryantm · opened 2d ago · checks pass

swift: 6.3.3 -> 6.4.0 draft

#574002 by reckenrode · opened 2d ago · checks pass

python3Packages.jack-client: 0.5.5 -> 0.5.7

#573997 by r-ryantm · opened 2d ago · checks pass

treewide: reduce runtime closures of CUDA packages

#573995 by Kranzes · opened 2d ago · checks pass

python3Packages.tokenspeed-triton: 3.8.10.post20260920 -> 3.9.10.post20261008

#573967 by r-ryantm · opened 2d ago · checks pass

factor-lang: 0.101 -> 0.102; Switch to pcre2; mark old versions for removal

#573955 by spacefrogg · opened 2d ago · checks pass

python3Packages.wxpython_4_3: init at 4.3.2, kicad: use wxwidgets_3_3

#573953 by korken89 · opened 2d ago · checks pass

rocqPackages.vsrocq-language-server: 2.4.3 -> 2.5.0

#573940 by Zimmi48 · opened 2d ago · checks pass

python3Packages.langchain-core: 1.6.6 -> 1.6.10

#573937 by r-ryantm · opened 2d ago · checks pass

rocqPackages.jasmin: 2026.03.3 → 2026.09.0

#573932 by vbgl · opened 2d ago · checks pass

haskellPackages.hercules-ci-*: update

#573928 by roberth · opened 2d ago · checks pass

pkgConfigCheckHook: init draft

#573917 by ethancedwards8 · opened 2d ago · checks pass

rocmPackages: 7.2.3 -> 10.1.0

#573885 by randomizedcoder · opened 2d ago · checks fail

python3Packages.pyzonneplan: init at 0.2.0

#573873 by JamieMagee · opened 2d ago · checks pass

python3Packages.aiovitesy: init at 1.4.0

#573868 by JamieMagee · opened 2d ago · checks pass

luajit_2_1: 2.1.1785763465 -> 2.1.1791890110, and more

#573867 by Skyb0rg007 · opened 2d ago · checks pass

python3Packages.aiothreema: init at 0.2.0

#573864 by JamieMagee · opened 2d ago · checks pass

python3Packages.theben-conexa-smgw: init at 0.4.2

#573860 by JamieMagee · opened 2d ago · checks pass

python3Packages.nvidia-cutlass-dsl-libs-base: don't add base_dsl to sys.path

#573858 by ConnorBaker · opened 2d ago · checks pass

python3Packages.aiopowerwall: init at 0.4.1

#573855 by JamieMagee · opened 2d ago · checks pass

lean4: 4.34.1 -> 4.35.0

#573851 by i-love-lean · opened 2d ago · checks pass

python3Packages.ansible-builder: 3.1.1 -> 3.2.0

#573841 by r-ryantm · opened 2d ago · checks pass

2773 more in the JSON API

Closed or merged in the synced window 4715

various: fix for qt 6.12

#574890 by GrimmTheShrimp · merged 2h ago

python3Packages.jupyter-server-fileid: 0.9.3 -> 0.10.0

#574887 by r-ryantm · merged 1h ago

[staging-next] python3Packages.beets: fix build with structuredAttrs

#574819 by whispersofthedawn · merged 3h ago

python3Packages.pyreqwest: 0.14.0 -> 0.15.0

#574782 by r-ryantm · merged 1h ago

phpExtensions.datadog_trace: 1.19.2 -> 1.26.0

#574777 by piotrkwiecinski · merged 7h ago

phpExtensions.tideways: 5.20.0 -> 5.47.0

#574772 by piotrkwiecinski · merged 8h ago

php{Extensions,Packages}: use tag instead of rev

#574750 by piotrkwiecinski · merged 8h ago

python3Packages.iamdata: 0.1.202610151 -> 0.1.202610161

#574738 by fabaff · merged 11h ago

python3Packages.spsdk-mcu-link: 0.6.14 -> 0.6.18

#574724 by r-ryantm · merged 2h ago

llvmPackages.compiler-rt: fix eval of pkgsStatic on darwin

#574706 by zowoq · merged 12h ago

[Backport release-26.05] python314Packages.mcdreforged: 2.15.7 -> 2.16.0

#574688 by nixpkgs-ci · merged 14h ago

cargo-pgrx: fix forced system libraries

#574648 by RossSmyth · merged 12h ago

kdePackages.qmenumodel: 0.10.0 -> 0.10.1

#574622 by r-ryantm · merged 17h ago

python3Packages.pygraphviz: 2.0.3 -> 2.0.4

#574586 by r-ryantm · merged 22h ago

ocamlPackages.digestif: 1.3.1 -> 1.4.0

#574520 by r-ryantm · merged 12h ago

emiluaPlugins.qt6: fix build

#574515 by lucasew · merged 19h ago

phpPackages.castor: 1.5.0 -> 1.8.1; phpPackages.castor: mark broken on php < 8.4

#574504 by piotrkwiecinski · merged 1d ago

python3Packages.azure-appconfiguration: 1.9.0 -> 1.10.0

#574496 by r-ryantm · merged 1d ago

flutter: preserve $ORIGIN in Linux engine RUNPATH

#574475 by coffeeispower · merged 1d ago

python3Packages.fhirpy: 2.2.0 -> 2.3.1

#574472 by r-ryantm · merged 23h ago

python3Packages.mypy-boto3-*: updates

#574463 by fabaff · merged 1d ago

lib.licenses: remove `openssl`

#574451 by aduh95 · closed 1d ago

gcc: enable Objective-C and Objective-C++ by default on all platforms

#574447 by 223740 · closed 1d ago

nodejs: remove `nghttp3` and `ngtcp2` from requisites

#574405 by aduh95 · merged 1d ago

python3Packages.devolo-plc-api: 1.5.1 -> 1.6.0

#574371 by fabaff · merged 1d ago

python3Packages.*: convert all sha256 to hash in all fetchers

#574354 by ShadowRZ · merged 22h ago

python3Packages.pyoverkiz: 2.2.0 -> 2.2.2

#574352 by fabaff · merged 1d ago

python3Packages.pvo: 3.0.0 -> 4.0.0

#574351 by fabaff · merged 1d ago

python3Packages.pyais: 3.3.0 -> 3.3.1

#574350 by fabaff · merged 1d ago

python3Packages.homematicip: 2.18.0 -> 2.19.0

#574349 by fabaff · merged 1d ago

python3Packages.claude-agent-sdk: 0.2.165 -> 0.2.167

#574348 by fabaff · merged 1d ago

python3Packages.checkdmarc: 6.0.3 -> 6.0.4

#574347 by fabaff · merged 1d ago

dotnetCorePackages.sdk_10_0: 10.0.401 -> 10.0.402

#574336 by asmundo · closed 1d ago

python3Packages.requests-aws4auth: 1.3.2 -> 1.4.0

#574335 by r-ryantm · merged 1d ago

python3Packages.fontmake: 3.12.1 -> 3.12.2

#574332 by r-ryantm · merged 1d ago

python3Packages.sievelib: 1.5.0 -> 1.6.0

#574328 by r-ryantm · merged 1d ago

python3Packages.tank-utility: 1.5.0 -> 1.5.1

#574325 by fabaff · merged 1d ago

python3Packages.weatherflow4py: 1.5.10 -> 1.5.12

#574324 by fabaff · merged 1d ago

python3Packages.pyfaup-rs: 0.4.23 -> 0.4.24

#574323 by fabaff · merged 1d ago

python3Packages.pytenable: 26.8.1 -> 26.10.1

#574320 by fabaff · merged 1d ago

python3Packages.resend: 2.45.0 -> 2.49.1

#574319 by fabaff · merged 1d ago

python314Packages.mcdreforged: 2.15.7 -> 2.16.0

#574315 by Moraxyc · merged 23h ago

python3Packages.types-awscrt: 0.36.2 -> 0.37.0

#574312 by r-ryantm · merged 1d ago

dotnetCorePackages.sdk_11_0: 11.0.100-rc.1.26425.128 -> 11.0.100-rc.2.26504.105

#574290 by asmundo · closed 1d ago

dotnetCorePackages.sdk_10_0: 10.0.401 -> 10.0.402

#574289 by asmundo · closed 1d ago

dotnetCorePackages.sdk_9_0: 9.0.318 -> 9.0.319

#574288 by asmundo · closed 1d ago

dotnetCorePackages.sdk_8_0: 8.0.425 -> 8.0.426

#574287 by asmundo · closed 1d ago

[staging-next] patchelf: revert to previous version temporarily in notable cases

#574271 by vcunat · merged 20h ago

python3Packages.regex: 2026.8.12 -> 2026.9.29

#574267 by dotlambda · merged 1d ago

dotnet_10: 10.0.12 -> 10.0.13

#574264 by asmundo · closed 1d ago

python3Packages.speechbrain: 1.1.1 -> 1.1.2

#574257 by GaetanLepage · merged 1d ago

python3Packages.subliminal: 2.7.1 -> 2.8.0

#574256 by r-ryantm · merged 1d ago

python3Packages.aioghost: 0.4.30 -> 0.4.32

#574236 by r-ryantm · merged 1d ago

[Backport release-26.05] beamPackages.hex: 2.5.2 -> 2.5.3

#574232 by nixpkgs-ci · merged 1d ago

beamPackages.hex: 2.5.2 -> 2.5.3

#574226 by adamcstephens · merged 1d ago

idrisPackages.*: convert all sha256 to hash in all fetchers

#574222 by ShadowRZ · merged 22h ago

python3Packages.badsecrets: 1.2.1 -> 1.3.0

#574209 by r-ryantm · merged 1d ago

python3Packages.weatherflow4py: 1.5.10 -> 1.5.12

#574204 by r-ryantm · merged 1d ago

python3Packages.types-s3transfer: 0.16.0 -> 0.19.2

#574198 by r-ryantm · merged 1d ago

python3Packages.types-six: 1.17.0.20260724 -> 1.17.0.20261008

#574194 by r-ryantm · merged 1d ago

python3Packages.async-upnp-client: 0.48.2 -> 0.49.0

#574189 by r-ryantm · merged 1d ago

python3Packages.checkdmarc: 6.0.3 -> 6.0.4

#574185 by r-ryantm · merged 1d ago

swiftPackages.swiftc: mark broken on aarch64-linux

#574172 by reckenrode · merged 1d ago

python3Packages.ffmpeg-progress-yield: 1.1.3 -> 1.1.4

#574169 by r-ryantm · merged 1d ago

nodejs_26: 26.11.1 -> 26.12.0

#574166 by aduh95 · merged 1d ago

python3Packages.pyfxa: 0.8.2 -> 0.9.0

#574165 by r-ryantm · merged 1d ago

python3Packages.langchain-mongodb: 0.12.0 -> 0.12.1

#574164 by r-ryantm · merged 1d ago

[Backport staging-26.05] nodejs_24: 24.21.0 -> 24.22.0

#574163 by nixpkgs-ci · merged 1d ago

python3Packages.turbohtml: 1.13.1 -> 1.15.1

#574158 by dotlambda · merged 1d ago

Revert "patchelf: 0.15.2 -> 0.19.2" draft

#574157 by mdaniels5757 · closed 6h ago

python3Packages.pyramid: add setuptools_80 to dependencies

#574151 by Stunkymonkey · merged 19h ago

python3Packages.python-ipware: 3.0.0 -> 4.1.1

#574142 by dotlambda · merged 1d ago

cudaPackages.nvcomp: 5.3.0 -> 6.0.0, add gpuCheck

#574138 by ConnorBaker · merged 1d ago

python3Packages.python-gnupg: 0.5.6 -> 0.5.7

#574137 by dotlambda · merged 1d ago

python3Packages.python-dotenv: 1.2.3 -> 1.2.4

#574136 by dotlambda · merged 1d ago

python3Packages.mysqlclient: 2.2.7 -> 2.3.0

#574133 by dotlambda · merged 1d ago

[Backport release-26.05] erlang: 29.1.1 -> 29.1.2, 28.5.0.7 -> 28.5.0.8, 27.3.4.18 -> 27.3.4.19

#574130 by nixpkgs-ci · merged 1d ago

python3Packages.css-inline: 0.22.0 -> 0.22.1

#574129 by mweinelt · merged 1d ago

python3Packages.ijson: 3.5.1 -> 3.6.0

#574128 by dotlambda · merged 1d ago

python3Packages.imap-tools: 1.15.1 -> 1.16.0

#574122 by dotlambda · merged 1d ago

python3Packages.djangorestframework: 3.18.1 -> 3.18.3

#574121 by dotlambda · merged 1d ago

python3Packages.concurrent-log-handler: 0.9.29 -> 0.9.30

#574120 by dotlambda · merged 1d ago

cudaPackages.mathdx: init at 26.06.1

#574105 by ConnorBaker · merged 1d ago

erlang: 29.1.1 -> 29.1.2, 28.5.0.7 -> 28.5.0.8, 27.3.4.18 -> 27.3.4.19

#574098 by adamcstephens · merged 1d ago

python3Packages.types-paramiko: 5.0.0.20260724 -> 5.0.0.20261006

#574090 by r-ryantm · merged 1d ago

python3Packages.odc-loader: 0.6.4 -> 0.6.5

#574085 by r-ryantm · merged 1d ago

[staging-26.05] sqlite: revert rebuild avoidance to fix lix rec-set-dynamic-attrs

#574077 by whispersofthedawn · merged 1d ago

mesa: 26.2.4 -> 26.2.5

#574073 by K900 · merged 2d ago

python3Packages.knx-telegram-store: 0.14.0 -> 0.15.1

#574066 by r-ryantm · merged 2d ago

uncord: init at 0.75b

#574061 by epwv · closed 2d ago

python3Packages.nvidia-resiliency-ext: fix, run tests

#574054 by GaetanLepage · merged 2d ago

python3Packages.microsoft-kiota-*: 1.14.2 -> 1.14.3

#574052 by fabaff · merged 1d ago

python3Packages.manim: 0.21.0 -> 0.22.0

#574051 by haansn08 · merged 6h ago

nodejs_24: 24.21.0 -> 24.22.0

#574050 by aduh95 · merged 2d ago

python3Packages.hcloud: 2.26.0 -> 2.27.0

#574048 by r-ryantm · merged 1d ago

nodejs_26: 26.11.1 -> 26.12.0

#574040 by aduh95 · merged 2d ago

python3Packages.pylance: 12.0.0 -> 13.0.0; python3Packages.lancedb: 0.39.0 -> 0.40.0

#574039 by GaetanLepage · merged 1d ago

python3Packages.pytest-playwright: 0.9.0 -> 0.10.0

#574013 by r-ryantm · merged 1d ago

python3Packages.scverse-misc: 0.1.6 -> 0.1.7

#574001 by r-ryantm · merged 1d ago

python3Packages.flash-attn-4: 4.0.0.beta34 -> 4.0.0.beta35

#573999 by GaetanLepage · merged 2d ago

Issues 639

Build failure: python3Packages.dulwich if Git has `withBreakingChanges = true`

#574788 by me-and · opened 8h ago · 2 comments

miniupnpc: security issues < 2.3.11 1.severity: security

#574404 by nixpkgs-security-tracker · opened 1d ago · 0 comments

python3Packages.gitpython: security issues < 3.2.0 1.severity: security

#574382 by nixpkgs-security-tracker · opened 1d ago · 0 comments

JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked 1.severity: security

#574299 by nixpkgs-security-tracker · opened 1d ago · 0 comments

unstructured: Stored XSS via unescaped HTML generation 1.severity: security

#574291 by nixpkgs-security-tracker · opened 1d ago · 0 comments

python3Packages.oauthlib: security issues < 4.0.0 1.severity: security

#573963 by nixpkgs-security-tracker · opened 2d ago · 0 comments

Build failure: `llvm_21`

#573544 by doronbehar · opened 3d ago · 0 comments

llvm: llvm-rc-based windres from LLVM bintools-wrapper preprocesses with the unwrapped clang, missing mingw-w64 headers

#573471 by greg-hellings · opened 3d ago · 0 comments

Build failure: vtk

#573324 by secretmango · opened 3d ago · 1 comments

qtile: X11 and Wayland sessions have identical names in LightDM

#573162 by AprilGrimoire · opened 4d ago · 0 comments

Build failure: python3Packages.uvloop

#572977 by h0nIg · opened 4d ago · 1 comments

CairoSVG: Quadratic-time DoS parsing a crafted SVG <path> 1.severity: security

#572404 by nixpkgs-security-tracker · opened 6d ago · 0 comments

datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory 1.severity: security

#572401 by nixpkgs-security-tracker · opened 6d ago · 0 comments

python3Packages.pydantic-ai-slim: security issues < 1.107.7 1.severity: security

#572129 by nixpkgs-security-tracker · opened 7d ago · 0 comments

python3Packages.banks: securty issues < 2.5.1 (needs something for stable) 1.severity: security

#572128 by nixpkgs-security-tracker · opened 7d ago · 0 comments

vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach 1.severity: security

#571252 by nixpkgs-security-tracker · opened 9d ago · 0 comments

WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE 1.severity: security

#571243 by nixpkgs-security-tracker · opened 9d ago · 0 comments

Update Request: podman 5.8.8 → 6.1.4

#571094 by Jorenar · opened 9d ago · 0 comments

docling: security issues < 2.132.0 1.severity: security

#570893 by nixpkgs-security-tracker · opened 10d ago · 0 comments

Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware 1.severity: security

#570885 by nixpkgs-security-tracker · opened 10d ago · 0 comments

swift: linking packages with c++ interop fails with both gnu ld and lld

#570491 by WeetHet · opened 11d ago · 2 comments

Build failure: python312Packages.anyio

#570271 by jerome-benoit · opened 11d ago · 2 comments

python3Packages.thrift: security issues < 0.25.0 1.severity: security

#569838 by nixpkgs-security-tracker · opened 13d ago · 0 comments

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction 1.severity: security

#569830 by nixpkgs-security-tracker · opened 13d ago · 0 comments

thrift: security issues < 0.25.0 1.severity: security

#569828 by nixpkgs-security-tracker · opened 13d ago · 0 comments

python3Packages.tornado: security issues < 6.5.9 1.severity: security

#569366 by nixpkgs-security-tracker · opened 2w ago · 0 comments

geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point 1.severity: security

#569362 by nixpkgs-security-tracker · opened 2w ago · 0 comments

urllib3: CVE-2026-97687 1.severity: security

#569318 by h0nIg · opened 2w ago · 0 comments

python3Packages.pypdf: security issues < 6.19.0 1.severity: security

#569078 by nixpkgs-security-tracker · opened 2w ago · 0 comments

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup 1.severity: security

#569074 by nixpkgs-security-tracker · opened 2w ago · 0 comments

urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 1.severity: security

#568639 by nixpkgs-security-tracker · opened 2w ago · 1 comments

Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation 1.severity: security

#568636 by nixpkgs-security-tracker · opened 2w ago · 0 comments

virtualenv: security issues < 21.7.13 1.severity: security

#568628 by nixpkgs-security-tracker · opened 2w ago · 0 comments

python3Packages.pyjwt: security issues < 2.15.0 1.severity: security

#568120 by nixpkgs-security-tracker · opened 2w ago · 0 comments

Wrong license for aspell-dict-en-science

#567920 by TheOneWithTheBraid · opened 2w ago · 0 comments

python3Packages.monai: security issues =< 1.6.0 1.severity: security

#567805 by nixpkgs-security-tracker · opened 2w ago · 0 comments

python3Packages.monai: security issues < 1.6.0 1.severity: security

#567804 by nixpkgs-security-tracker · opened 2w ago · 0 comments

Build failure: mlxtend

#567630 by jadewilk · opened 2w ago · 1 comments

Update Request: python3Packages.opendal 0.46.0 → 0.47.10

#567427 by attilaolah · opened 2w ago · 1 comments

Update Request: perl 5.42.3 → 5.44.0

#566820 by Jayman2000 · opened 3w ago · 0 comments

rns: rnodeconf fails to flash six board types — UnboundLocalError on 'flasher'

#566575 by Romati21 · opened 3w ago · 0 comments

icalendar: Denial of service via unbounded VALARM REPEAT expansion 1.severity: security

#566485 by nixpkgs-security-tracker · opened 3w ago · 0 comments

Update Request: python3Packages.hypothesis 6.156.1 → 6.168.1

#566233 by ilovelinux · opened 3w ago · 1 comments

Update Request: python3Packages.time-machine 3.2.0 → 3.5.1

#566210 by ilovelinux · opened 3w ago · 1 comments

psd-tools: Uncontrolled memory allocation in psd-tools composite/numpy via crafted PSD geometry 1.severity: security

#566200 by nixpkgs-security-tracker · opened 3w ago · 0 comments

netdata: security issues < 2.11.0 (backport needed) 1.severity: security

#566194 by nixpkgs-security-tracker · opened 3w ago · 0 comments

radare2: security issues < 6.2.0 (backport needed) 1.severity: security

#566192 by nixpkgs-security-tracker · opened 3w ago · 0 comments

build failure: Electron

#565484 by philippswoboda · opened 3w ago · 3 comments

poppler: security issues < 26.08.0 1.severity: security

#564871 by nixpkgs-security-tracker · opened 3w ago · 0 comments

Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service) 1.severity: security

#564870 by nixpkgs-security-tracker · opened 3w ago · 0 comments

Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute 1.severity: security

#564518 by nixpkgs-security-tracker · opened 4w ago · 0 comments

Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`) 1.severity: security

#564512 by nixpkgs-security-tracker · opened 4w ago · 0 comments

openslide: security issues < 4.0.1 1.severity: security

#564503 by nixpkgs-security-tracker · opened 4w ago · 0 comments

python3Packages.sanic: security issues < 24.12.1 (backport needed) 1.severity: security

#564493 by nixpkgs-security-tracker · opened 4w ago · 1 comments

AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION 1.severity: security

#564229 by nixpkgs-security-tracker · opened 4w ago · 0 comments

octaveFull: dumped core on undocking/moving widget

#564121 by JustScreaMy · opened 4w ago · 3 comments

elasticsearch: consider building from source for AGPL3 license 1.severity: legal

#563962 by kuflierl · opened 4w ago · 0 comments

python3Packages.tornado: security issues < 6.5.8 1.severity: security

#563855 by nixpkgs-security-tracker · opened 4w ago · 0 comments

dotnet-sdk_11: dotnet 11 breaks all debuggers (to varying degrees) due to faulty patching of symbols from `libunwind` in `libmscordaccore.so`

#563805 by MicroTransactionsMatterToo · opened 4w ago · 2 comments

erlang: add coreutils to launcher runtimePath

#563746 by spotdemo4 · opened 4w ago · 0 comments

ASTEVAL: Sandbox Escape via BaseException Subclasses 1.severity: security

#563477 by nixpkgs-security-tracker · opened 4w ago · 1 comments

PocketSphinx: Buffer overflows in language and acoustic model loading code 1.severity: security

#563474 by nixpkgs-security-tracker · opened 4w ago · 0 comments

glibc: security issues GLIBC-SA-2026-0017 and GLIBC-SA-2026-0018 1.severity: security

#563466 by nixpkgs-security-tracker · opened 4w ago · 0 comments

perl: CVE-2026-12087 1.severity: security

#563113 by h0nIg · opened 4w ago · 2 comments

Build failure: emborg

#563026 by iedame · opened 4w ago · 0 comments

godot-mono: allow overriding the dotnet version

#562950 by imnotpoz · opened 4w ago · 0 comments

Build failure: beanhub-cli

#561941 by iedame · opened 5w ago · 5 comments

python3Packages.gitpython: security issues < 3.1.60 1.severity: security

#561915 by nixpkgs-security-tracker · opened 5w ago · 0 comments

python3Packages.anki-mac-helper: incorrect version causes `anki` failure on aarch64-darwin

#561508 by jollyroger182 · opened 5w ago · 0 comments

libpcap: security issues < 1.10.7 1.severity: security

#560497 by nixpkgs-security-tracker · opened 5w ago · 1 comments

Update Request: fourmolu 0.19.0.1 → 0.20.1.0

#560365 by magistau · opened 5w ago · 0 comments

Build failure: execline (cross compiling)

#559916 by telent · opened 6w ago · 1 comments

parsedmarc: security issues < 11.0.1 1.severity: security

#559762 by nixpkgs-security-tracker · opened 6w ago · 0 comments

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters 1.severity: security

#559509 by nixpkgs-security-tracker · opened 6w ago · 0 comments

python3Packages.httpx2: security issues < 2.12.0 1.severity: security

#559489 by nixpkgs-security-tracker · opened 6w ago · 1 comments

sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption 1.severity: security

#559072 by nixpkgs-security-tracker · opened 6w ago · 0 comments

python3Packages.pypdf: security issues < 6.16.1 1.severity: security

#559063 by nixpkgs-security-tracker · opened 6w ago · 0 comments

Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop 1.severity: security

#558816 by nixpkgs-security-tracker · opened 6w ago · 0 comments

julia: GMP_jll fails to load on aarch64-darwin, fails to find libgmp

#557722 by ReubenJ · opened 6w ago · 3 comments

mesa: No EGL / GL configurations available across GPU terminals (Kitty, Ghostty, Alacritty) on Intel Broadwell

#557626 by betmut · opened 6w ago · 16 comments

Update Request: textual-speedups 0.2.1 → 0.2.1-unstable-2026-04-08

#557488 by devurandom · opened 6w ago · 0 comments

haskell.compiler.ghc9124: GHC shared libraries built with gold 2.46 fail to link with mold

#557382 by flip111 · opened 7w ago · 1 comments

Update Request: glfw 3.4 → 3.5.1

#556797 by hydecnc · opened 7w ago · 0 comments

lima: fails to find virtiofsd on NixOS

#555161 by donn · opened 8w ago · 1 comments

Unreproducible Package: nix-tree 6.topic: reproducible builds

#554305 by SandaruKasa · opened 8w ago · 5 comments

Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth 1.severity: security

#552188 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata 1.severity: security

#552183 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

Kestra: Unauthenticated management `/worker` endpoint exposes live task configuration and plaintext credentials 1.severity: security

#552181 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

python-socketio: Binary attachment accumulation can cause denial of service 1.severity: security

#552180 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login 1.severity: security

#551114 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

mlflow: Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint 1.severity: security

#549781 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

services.prefect: web UI not served — static files not bundled in Prefect 3.x and not downloaded by module

#549308 by eva-nebot · opened 2mo ago · 0 comments

Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header 1.severity: security

#549106 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

Build failure: nodejs-slim

#548402 by n0099 · opened 2mo ago · 5 comments

mpv: Failed to open VDPAU backend libvdpau_radeonsi.so: cannot open shared object file: No such file or directory

#548369 by spavlovich001 · opened 2mo ago · 0 comments

rPackages.V8: build failure in nixos-26.05 — undefined icu_78::* symbols (gt/gtsummary broken)

#547532 by eva-nebot · opened 2mo ago · 0 comments

Build failure: python3Packages.pysfcgal 6.topic: NLNet / NGI

#547060 by imincik · opened 2mo ago · 0 comments

Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash 1.severity: security

#546992 by nixpkgs-security-tracker · opened 2mo ago · 0 comments

Conduit: Fails on several issues

#546754 by abhishek1297 · opened 2mo ago · 0 comments

thrift: security issues < 0.24.0 1.severity: security

#546584 by nixpkgs-security-tracker · opened 2mo ago · 2 comments

539 more in the JSON API

Closed or merged in the synced window 93

openvino: SIGILLs on aarch64-linux

#573088 by tlvince · closed 2d ago · 0 comments

Build failure: python3Packages.sqliteschema

#573084 by h0nIg · closed 1d ago · 1 comments

Build failure: sphinx

#572919 by h0nIg · closed 1d ago · 2 comments

Build failure: python3Packages.qtile 0.37.1 on 26.05 uses incompatible wlroots 0.19

#572786 by AprilGrimoire · closed 5d ago · 2 comments

Build failure: semgrep

#571045 by l0b0 · closed 6d ago · 1 comments

Build failure: duckdb, aarch64 on hydra: log limit exceeded

#570642 by lorinder · closed 10d ago · 1 comments

Update Request: kanidm 1.11 → 1.12

#569836 by ser · closed 13d ago · 2 comments

Update Request: lua 5.2 → 5.5

#569505 by Skyb0rg007 · closed 2w ago · 1 comments

Build failure: nodejs_26 aarch64-linux

#568974 by tlvince · closed 11d ago · 2 comments

Build failure: zeroc-ice

#568863 by toastal · closed 8d ago · 0 comments

swiftpm: aborts on macOS < 26, swift-collections has no rpath for libswiftCompatibilitySpan.dylib 6.topic: darwin

#568710 by Brawl345 · closed 2w ago · 0 comments

JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard 1.severity: security

#568637 by nixpkgs-security-tracker · closed 2w ago · 0 comments

JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json) 1.severity: security

#568631 by nixpkgs-security-tracker · closed 2w ago · 0 comments

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs 1.severity: security

#568622 by nixpkgs-security-tracker · closed 2w ago · 0 comments

OpenSSL: security updates 2029-09-29 1.severity: security

#568556 by nixpkgs-security-tracker · closed 2w ago · 1 comments

python3Packages.pyjwt: security issues < 2.14.0 1.severity: security

#568118 by nixpkgs-security-tracker · closed 2w ago · 0 comments

vllm: security issues < 0.29.0 1.severity: security

#567655 by nixpkgs-security-tracker · closed 2d ago · 1 comments

Build failure: git-annex

#566500 by nadir-ishiguro · closed 2w ago · 0 comments

unixODBCDrivers.sqlite: install phase fails, $out/lib not created

#566377 by kalishxern · closed 3w ago · 1 comments

vector: security issues < 0.57.0 (backport needed) 1.severity: security

#566188 by nixpkgs-security-tracker · closed 3w ago · 5 comments

inventree: security issues < 1.4.0 1.severity: security

#565734 by nixpkgs-security-tracker · closed 12d ago · 0 comments

vllm: CVE-2026-93592 and CVE-2026-93840 1.severity: security

#564858 by nixpkgs-security-tracker · closed 2d ago · 1 comments

llvmPackages.clang-tools: wrapper is a bash script with a `#!/bin/sh` shebang, losing all include paths on non-NixOS hosts

#564400 by mpatankar6 · closed 4w ago · 2 comments

Stanza: Zip Slip Path Traversal in Model/Resource Extraction 1.severity: security

#564239 by nixpkgs-security-tracker · closed 4w ago · 1 comments

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions 1.severity: security

#564227 by nixpkgs-security-tracker · closed 2d ago · 1 comments

pipx: Tests failing

#563849 by frlan · closed 3w ago · 2 comments

Update Request: `python3Packages.dulwich` 1.2.10 → 1.2.15

#563603 by Jayman2000 · closed 4w ago · 0 comments

Build failure: python3Packages.ifcopenshell

#563327 by secretmango · closed 4w ago · 1 comments

zlib: CVE-2026-85091 1.severity: security

#563112 by h0nIg · closed 8d ago · 2 comments

Build failure: electron_44-bin

#563022 by iedame · closed 3w ago · 0 comments

vllm: security issues < 0.28.0 1.severity: security

#562846 by nixpkgs-security-tracker · closed 2d ago · 2 comments

Build failure: btrsync

#562826 by iedame · closed 3w ago · 0 comments

Update Request: cudatoolkit 12.9 → 13.4

#562776 by levihuayuzhang · closed 5d ago · 1 comments

Build failure: cachix on (aarch64-)darwin 1.severity: channel blocker

#562481 by vcunat · closed 4w ago · 8 comments

consul: security issues < 2.0.4 1.severity: security

#562165 by nixpkgs-security-tracker · closed 4w ago · 6 comments

libxml2: security issues < 2.15.4 1.severity: security

#560496 by nixpkgs-security-tracker · closed 5w ago · 1 comments

Build failure: python3Packages.torch

#560210 by anund · closed 13d ago · 7 comments

python3Packages.pyopenjtalk-plus: fails to build on aarch64-linux

#560140 by hesprs · closed 5w ago · 1 comments

Build failure: python314Packages.pyqt5

#559671 by Zariel · closed 6w ago · 2 comments

Build failure: python314Packages.pyqt5

#559458 by ETCaton · closed 6w ago · 2 comments

pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install 1.severity: security

#558809 by nixpkgs-security-tracker · closed 13d ago · 0 comments

pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph 1.severity: security

#558807 by nixpkgs-security-tracker · closed 13d ago · 0 comments

Update Request: electron 43.4.1 → 43.5.1

#558667 by ccicnce113424 · closed 5w ago · 0 comments

Update Request: bgutil-ytdlp-pot-provider 1.3.1 → 1.3.2

#558607 by zdhd122a · closed 4w ago · 3 comments

Build failure: flutter

#558555 by themg95 · closed 5w ago · 3 comments

Build failure: notmuch

#556557 by jian-lin · closed 7w ago · 2 comments

electron_43: applications missing system tray icon

#556106 by ccicnce113424 · closed 5w ago · 4 comments

Build failure: python3Packages.nidaqmx

#555511 by Sigmanificient · closed 5w ago · 0 comments

callCabal2nix does not support new-enough `cabal-version` of the cabal file 6.topic: haskell

#555255 by jian-lin · closed 5w ago · 9 comments

temurin-bin-25: jlink does not function - SHA-512 sum check failed

#554925 by TropheusJ · closed 4w ago · 1 comments

python3Packages.fastmcp-slim: Python 3.14 partial annotations are lost 6.topic: python

#553478 by TyceHerrman · closed 8w ago · 0 comments

mesa: 26.2.0 can hard-hang Intel iGPUs (i915) with certain apps (e.g. firefox, WezTerm)

#553285 by ryan4yin · closed 8w ago · 7 comments

nanoemoji: incorrect hash

#552793 by matty-kuhn · closed 2mo ago · 3 comments

Build failure: python3Packages.plumbum on aarch64-darwin

#551001 by mnixry · closed 2mo ago · 0 comments

Build failure: typing-inspection

#550910 by h0nIg · closed 6w ago · 5 comments

Electron: ProtocolResponse.url reuses the default session cache instead of the registering session 1.severity: security

#549786 by nixpkgs-security-tracker · closed 6w ago · 0 comments

livebook: security issues < 0.19.9 1.severity: security

#549775 by nixpkgs-security-tracker · closed 5w ago · 2 comments

gitpython: security issues < 3.1.51 (needs backport) 1.severity: security

#548548 by nixpkgs-security-tracker · closed 5w ago · 1 comments

Build failure: cot, pythonPackages.cot

#548249 by Sigmanificient · closed 6w ago · 0 comments

ffmpeg-full-8.1.2: failed checking for nvcc

#548167 by S0AndS0 · closed 5w ago · 8 comments

datamodel-code-generator: security issues < 0.64.0 (backports needed) 1.severity: security

#546984 by nixpkgs-security-tracker · closed 5w ago · 1 comments

locate: services.locate.output not working

#546702 by sjau · closed 3d ago · 1 comments

Build failure: python3Packages.optuna

#546518 by amarshall · closed 4w ago · 1 comments

semgrep: pytest checkPhase segfaults (SIGSEGV) on aarch64-linux

#543951 by stationedK-06 · closed 10d ago · 1 comments

pandoc: built without Lua support on aarch64-darwin since apple-sdk_26 26.5 6.topic: darwin

#540900 by caass · closed 7w ago · 5 comments

ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) 1.severity: security

#539898 by nixpkgs-security-tracker · closed 4w ago · 0 comments

NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read 1.severity: security

#534492 by nixpkgs-security-tracker · closed 4w ago · 1 comments

Typesense: security issues < 29.1 1.severity: security

#531281 by nixpkgs-security-tracker · closed 2w ago · 1 comments

Update Request: boost 1.89 → 1.91

#524521 by Boosted-Bonobo · closed 5w ago · 0 comments

Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components 1.severity: security

#520506 by nixpkgs-security-tracker · closed 5w ago · 1 comments

Wagtail: Improper permission handling when comparing revisions 1.severity: security

#519395 by nixpkgs-security-tracker · closed 5w ago · 1 comments

LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass 1.severity: security

#513915 by nixpkgs-security-tracker · closed 5w ago · 1 comments

cuda_compat: incorrectly marked as unavailable on cuda 13.1 and 13.2 2.status: stale 6.topic: cuda

#508182 by stefanboca · closed 6d ago · 1 comments

Python: SourcelessFileLoader does not use io.open_code() 6.topic: python 1.severity: security

#496940 by nixpkgs-security-tracker · closed 4w ago · 1 comments

minio: package abandoned by upstream 1.severity: security 5.scope: tracking

#490996 by britter · closed 5h ago · 36 comments

ollama: DynamicUser is unconditionally set to true even when a static user account is set

#483840 by blue666man · closed 7w ago · 2 comments

Build failure: gtksourceview (meson build timeout)

#469034 by IllustratedMan-code · closed 3d ago · 5 comments

Build failure: nodejs on/for ppc64 6.topic: exotic

#458983 by OPNA2608 · closed 9mo ago · 6 comments

go: go build with 1.25 no longer static 6.topic: golang 2.status: stale

#456953 by h0nIg · closed 6d ago · 19 comments

optuna-dashboard: Updated to broken pre-release 2.status: stale

#441996 by Bohreromir · closed 3w ago · 0 comments

cudaPackages: setting NIX_DEBUG breaks RUNPATH of resulting binaries 2.status: stale 6.topic: cuda

#434096 by ConnorBaker · closed 8w ago · 6 comments

Build failure: rfcat 6.topic: python 2.status: stale

#425342 by D3vil0p3r · closed 2mo ago · 0 comments

docker: Missing forward rules for custom bridge network

#417641 by dschanoeh · closed 4w ago · 12 comments

Investigate various Python packages pinned to pre-2020 unstable commits 6.topic: python 3.skill: sprintable 3.skill: good-first-bug

#410837 by mweinelt · closed 7w ago · 25 comments

libvirt: passt not in service path

#400643 by Readf0x · closed 6mo ago · 3 comments

openvino: CPU plugin missing on ARM 2.status: stale

#388048 by smaeul · closed 2w ago · 3 comments

swiftpm: swift-test errors with libIndexStore.so cannot open shared object file 2.status: stale

#379859 by zvolin · closed 2w ago · 1 comments

Build failure: nodejs on RISC-V (RV64GC) 6.topic: riscv64

#374456 by RossComputerGuy · closed 3d ago · 9 comments

Update request: swift 5.8 → 6 6.topic: swift

#343210 by 223740 · closed 4w ago · 62 comments

minio: nixos module uses deprecated --config-dir 2.status: stale

#288175 by sedlund · closed 5h ago · 4 comments

aspellDicts.en-computers and aspellDicts.en-science source urls no longer exist

#192590 by Munksgaard · closed 2w ago · 2 comments

python3Packages.torchvision: `UserWarning: Failed to load image Python extension: .../image.so` 6.topic: python 2.status: stale

#162286 by samuela · closed 12d ago · 5 comments

minio: allow declarative bucket creation 6.topic: nixos 2.status: stale

#89559 by davidak · closed 5h ago · 5 comments