Maintainer Mode
Sign in with GitHub

pkgs/development/python-modules/

pkgs/development/ · 11173 packages and modules · 1898 open pull requests
Sign in to subscribe
Busy below
torch 13 · tensorflow 9 · archinfo 6 · claripy 6 · vllm 6 · angr 5 · cle 5 · jack-client 5 · pyvex 5 · pyxdia 5 · extractcode 4 · graphite-web 4 · jaxlib 4 · keeper-secrets-manager-core 4 · mlx 4 · plover 4 · qiskit 4 · requests-futures 4 · slskd-api 4 · ailment 3 · aioautomower 3 · aiohttp 3 · aiokef 3 · aioresponses 3 · amazon-ion 3 · anndata 3 · ansible 3 · args 3 · asn1ate 3 · awslambdaric 3 · buildgrid-metering-client 3 · cadquery-ocp 3 · cliche 3 · click 3 · coredis 3 · cppy 3 · datasets 3 · deprecation 3 · django 3 · fastmcp-slim 3
Packages and modules 11173
vllm 7 advisories 6 1
litellm 3 advisories upstream 1.105.1 1 2
libretranslate 2 advisories 0 1
parsedmarc 1 advisory upstream 11.0.3 3 1
litestar 1 advisory upstream 2.24.0 2 1
apprise 1 advisory upstream 2.0.1 2 0
cairosvg 1 advisory upstream 2.9.1 0 1
docling 1 advisory upstream 2.129.0 0 1
virtualenv 1 advisory upstream 21.14.8 no maintainer 0 1
crewai 1 advisory 1 2
marimo 1 advisory 1 0
ansi2html 1 advisory no maintainer 0 0
docling-serve 1 advisory no maintainer 0 0
ploverupstream 5.4.2 5 1
patoolupstream 4.1.0 3 1
jsbeautifierupstream 2.0.3 3 0
moleculeupstream 26.10.0 no maintainer 3 0
py7zrupstream 1.1.4 3 0
streamlitupstream 1.66.0 3 0
beanhub-cliupstream 3.3.0 1 1
cookiecutterupstream 2.7.1 2 0
mcstatusupstream 14.2.0 2 0
mypyupstream 2.4.0 no maintainer 2 0
napariupstream 0.9.2 2 0
openusdupstream 26.08 2 0
pipxupstream 1.18.2 1 1
pyinfraupstream 3.10.0 1 1
pyocdupstream 0.45.0 no maintainer 2 0
trezor-agentupstream 0.15.0 2 0
ansible-builderupstream 3.2.0 1 0
dataclass-wizardupstream 1.0.0 1 0
dataladupstream 1.7.1 1 0
fastapi-cliupstream 0.0.32 no maintainer 1 0
gdownupstream 6.4.2 1 0
langgraph-cliupstream 0.4.35 1 0
magikaupstream 1.1.0 1 0
meshcore-cliupstream 1.6.4 1 0
modalupstream 1.6.1 1 0
nszupstream 5.0.0 1 0
ocrmypdfupstream 17.13.0 1 0
pylintupstream 4.1.3 no maintainer 1 0
ratarmountupstream 1.3.0 1 0
reptorupstream 0.38 1 0
slither-analyzerupstream 0.11.6 1 0
trytondupstream 8.2.1 1 0
vdirsyncerupstream 0.21.0 1 0
vncdotoolupstream 1.4.2 no maintainer 1 0
yamllintupstream 1.38.0 no maintainer 1 0
actdiagupstream 3.1.0 0 0
autoflakeupstream 2.4.0 0 0
blackupstream 26.10.1 0 0
blockdiagupstream 3.4.2 0 0
breezyupstream 3.3.22 no maintainer 0 0
bump-my-versionupstream 1.6.0 0 0
certbotupstream 5.8.0 0 0
copierupstream 9.19.1 0 0
cryptolyzerupstream 1.6.0 0 0
datasetteupstream 0.65.5 no maintainer 0 0
deepdiffupstream 9.0.0 0 0
dot2texupstream 2.12.0 no maintainer 0 0
gftoolsupstream 0.10.3 0 0
google-compute-engineupstream 20220211.00 0 0
gvm-toolsupstream 26.1.1 0 0
hatchupstream 1.18.1 0 0
hjsonupstream 4.7.1 no maintainer 0 0
internetarchiveupstream 5.12.0 0 0
isortupstream 9.0.2 0 0
litupstream 23.1.3 no maintainer 0 0
memrayupstream 1.20.0 0 0
nodeenvupstream 1.11.0 no maintainer 0 0
papisupstream 0.16.1 0 0
sdkmanagerupstream 0.7.2 0 0
semgrepupstream 1.181.0 0 0
semgrep-coreupstream 1.181.0 0 0
seqdiagupstream 3.1.0 0 0
spyderupstream 6.1.7 no maintainer 0 0
twineupstream 7.0.0 no maintainer 0 0
yqupstream 4.4.5 0 0
zensicalupstream 0.0.69 0 0
python3Packages.cmakeno maintainer 5 4
python3Packages.dockerno maintainer 3 4
python3Packages.tornadono maintainer 2 4
Pull requests 1898
python3Packages.django-health-check: 4.8.0 -> 4.10.0
#574910 by r-ryantm · opened 27m ago · checks pass
python3Packages.jupyter-server-fileid: 0.9.3 -> 0.10.0
#574887 by r-ryantm · opened 1h ago · checks pass
python3Packages.django-hijack: 3.7.9 -> 3.8.0
#574885 by r-ryantm · opened 1h ago · checks pass
python3Packages.credsweeper: 1.19.2 -> 1.19.3
#574881 by r-ryantm · opened 1h ago · checks pass
python3Packages.pywiim: 2.3.9 -> 2.3.11
#574880 by r-ryantm · opened 1h ago · checks pass
python3Packages.xknx: 3.20.0 -> 4.0.0
#574852 by r-ryantm · opened 3h ago · checks pass
python3Packages.dendropy: 5.1.0 -> 5.1.1
#574841 by r-ryantm · opened 4h ago · checks pass
python3Packages.spglib: 2.7.0 -> 2.8.0
#574837 by r-ryantm · opened 4h ago · checks pass
python3Packages.azure-mgmt-keyvault: 14.0.1 -> 14.1.0
#574828 by r-ryantm · opened 4h ago · checks pass
python3Packages.fastrlock: 0.8.3 -> 0.8.4
#574822 by r-ryantm · opened 5h ago · checks pass
python3Packages.tensorly: 0.9.0 -> 0.10.0
#574817 by r-ryantm · opened 5h ago · checks pass
python3Packages.coiled: 1.135.4 -> 1.135.6
#574803 by r-ryantm · opened 6h ago · checks pass
python3Packages.pysatochip: 0.18.0 -> 0.18.5
#574800 by r-ryantm · opened 6h ago · checks pass
python3Packages.pvextractor: 0.4 -> 0.5
#574797 by r-ryantm · opened 6h ago · checks pass
python3Packages.pyreqwest: 0.14.0 -> 0.15.0
#574782 by r-ryantm · opened 7h ago · checks pass
python3Packages.google-cloud-netapp: 0.10.2 -> 0.10.3
#574780 by r-ryantm · opened 7h ago · checks pass
python3Packages.garminconnect: 0.3.17 -> 0.3.18
#574764 by r-ryantm · opened 8h ago · checks pass
python3Packages.libknot: 3.6.0 -> 3.6.1
#574735 by r-ryantm · opened 10h ago · checks pass
python3Packages.whool: 1.3 -> 1.3.1
#574731 by r-ryantm · opened 10h ago · checks pass
python3Packages.hiredis: 3.4.2 -> 3.5.0
#574720 by r-ryantm · opened 11h ago · checks pass
python3Packages.pybigwig: 0.3.26 -> 0.3.28
#574700 by r-ryantm · opened 12h ago · checks pass
python3Packages.llama-cloud: 2.16.0 -> 2.18.0
#574699 by r-ryantm · opened 12h ago · checks pass
python3Packages.flashinfer-python: 0.7.1 -> 0.7.2
#574635 by GaetanLepage · opened 18h ago · checks pass
python3Packages.flashinfer-jit-cache: init at 0.6.17
#574632 by GaetanLepage · opened 19h ago · checks pass
python3Packages.meshcore: 2.3.15 -> 2.3.16
#574629 by r-ryantm · opened 19h ago · checks pass
python3Packages.withings-sync: 6.0.2 -> 6.1.0
#574626 by r-ryantm · opened 19h ago · checks pass
python3Packages.gradient: drop
#574624 by SuperSandro2000 · opened 19h ago · checks pass
python3Packages.gradient-utils: drop
#574623 by SuperSandro2000 · opened 19h ago · checks pass
python3Packages.epaper-dithering: 6.0.0 -> 6.1.1
#574619 by r-ryantm · opened 19h ago · checks pass
python3Packages.py-unifi-access: 1.6.1 -> 1.6.2
#574618 by r-ryantm · opened 19h ago · checks pass
python3Packages.betterproto2: init at 0.10.0
#574550 by lennartmueh · opened 22h ago · checks pass
python3Packages.pydantic-settings: 2.14.2 -> 2.16.0
#574521 by lennartmueh · opened 1d ago · checks pass
python3Packages.botocore-stubs: 1.43.112 -> 1.43.114
#574497 by r-ryantm · opened 1d ago · checks pass
python3Packages.ufolib2: 0.18.1 -> 0.19.1
#574440 by r-ryantm · opened 1d ago · checks pass
python3Packages.dunamai: 1.26.2 -> 1.26.3
#574373 by me-and · opened 1d ago · checks pass
python3Packages.kopf: 1.44.6 -> 1.45.1
#574365 by SkohTV · opened 1d ago · checks pass
python3Packages.scikit-learn: 1.9.0 -> 1.9.1
#574275 by dotlambda · opened 1d ago · checks pass
python3Packages.pylsp-mypy: 0.8.0 -> 0.8.2
#574269 by r-ryantm · opened 1d ago · checks pass
python3Packages.altcha: 2.2.0 -> 2.3.0
#574230 by r-ryantm · opened 1d ago · checks pass
python3Packages.pyperscan: 0.3.0 -> 0.4.0
#574202 by r-ryantm · opened 1d ago · checks pass
python3Packages.lzallright: 0.2.6 -> 0.3.0
#574162 by r-ryantm · opened 1d ago · checks pass
python3Packages.filelock: 3.32.4 -> 4.1.2
#574125 by dotlambda · opened 1d ago · checks pass
python3Packages.xyzservices: 2026.3.0 -> 2026.9.1 draft
#574082 by autra · opened 1d ago · checks pass
python3Packages.parsedmarc: 11.0.2 -> 11.0.3
#574060 by r-ryantm · opened 2d ago · checks pass
python3Packages.pytest-django_4_12: 4.12.0 -> 4.14.0 draft
#574059 by r-ryantm · opened 2d ago · checks pass
python3Packages.django-embed-video: init at 1.4.10
#574056 by grindhold · opened 2d ago · checks pass
python3Packages.datafusion: 54.0.0 -> 55.0.0
#574044 by r-ryantm · opened 2d ago · checks pass
python3Packages.jack-client: 0.5.5 -> 0.5.7
#573997 by r-ryantm · opened 2d ago · checks pass
treewide: reduce runtime closures of CUDA packages
#573995 by Kranzes · opened 2d ago · checks pass
python3Packages.langchain-core: 1.6.6 -> 1.6.10
#573937 by r-ryantm · opened 2d ago · checks pass
rocmPackages: 7.2.3 -> 10.1.0
#573885 by randomizedcoder · opened 2d ago · checks fail
python3Packages.pyzonneplan: init at 0.2.0
#573873 by JamieMagee · opened 2d ago · checks pass
python3Packages.aiovitesy: init at 1.4.0
#573868 by JamieMagee · opened 2d ago · checks pass
python3Packages.aiothreema: init at 0.2.0
#573864 by JamieMagee · opened 2d ago · checks pass
python3Packages.theben-conexa-smgw: init at 0.4.2
#573860 by JamieMagee · opened 2d ago · checks pass
python3Packages.aiopowerwall: init at 0.4.1
#573855 by JamieMagee · opened 2d ago · checks pass
python3Packages.ansible-builder: 3.1.1 -> 3.2.0
#573841 by r-ryantm · opened 2d ago · checks pass
python3Packages.uhi: 1.2.0 -> 1.2.1
#573829 by r-ryantm · opened 2d ago · checks pass
python3Packages.sendspin: 7.6.0 -> 8.0.0
#573801 by 9R · opened 2d ago
anki: 26.08 -> 26.09.3
#573799 by MysteryBlokHed · opened 2d ago · checks pass
python314Packages.antspyx: init at 0.6.3
#573660 by bcdarwin · opened 3d ago · checks pass
python3Packages.aw-core: 0.5.17 -> 0.5.18
#573451 by whispersofthedawn · opened 3d ago · checks pass
python3Packages.irm-kmi-api: 1.1.1 -> 1.1.2 draft
#573396 by r-ryantm · opened 3d ago
mupdf, python3Packages.pymupdf: update to 1.28.x
#573327 by sarahec · opened 3d ago · checks pass
Closed or merged in the synced window 3435
various: fix for qt 6.12
#574890 by GrimmTheShrimp · merged 54m ago
python3Packages.pvo: 3.0.0 -> 4.0.0
#574351 by fabaff · merged 1d ago
uncord: init at 0.75b
#574061 by epwv · closed 2d ago
mujoco: 3.15.0 -> 3.16.0
#573986 by GaetanLepage · merged 1d ago
semgrep: 1.179.0 -> 1.180.0
#573984 by r-ryantm · merged 1d ago
playwright: 1.63.0 -> 1.64.1
#573911 by 81reap · merged 22h ago
maintainers: drop caniko draft
#573772 by amarshall · closed 1d ago
notus-scanner: 23.0.0 -> 23.0.1
#573734 by r-ryantm · merged 2d ago
Issues 300
miniupnpc: security issues < 2.3.11 1.severity: security
#574404 by nixpkgs-security-tracker · opened 1d ago · 0 comments
python3Packages.gitpython: security issues < 3.2.0 1.severity: security
#574382 by nixpkgs-security-tracker · opened 1d ago · 0 comments
JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked 1.severity: security
#574299 by nixpkgs-security-tracker · opened 1d ago · 0 comments
unstructured: Stored XSS via unescaped HTML generation 1.severity: security
#574291 by nixpkgs-security-tracker · opened 1d ago · 0 comments
python3Packages.oauthlib: security issues < 4.0.0 1.severity: security
#573963 by nixpkgs-security-tracker · opened 2d ago · 0 comments
qtile: X11 and Wayland sessions have identical names in LightDM
#573162 by AprilGrimoire · opened 4d ago · 0 comments
Build failure: python3Packages.uvloop
#572977 by h0nIg · opened 4d ago · 1 comments
CairoSVG: Quadratic-time DoS parsing a crafted SVG <path> 1.severity: security
#572404 by nixpkgs-security-tracker · opened 6d ago · 0 comments
datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory 1.severity: security
#572401 by nixpkgs-security-tracker · opened 6d ago · 0 comments
python3Packages.pydantic-ai-slim: security issues < 1.107.7 1.severity: security
#572129 by nixpkgs-security-tracker · opened 7d ago · 0 comments
python3Packages.banks: securty issues < 2.5.1 (needs something for stable) 1.severity: security
#572128 by nixpkgs-security-tracker · opened 7d ago · 0 comments
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach 1.severity: security
#571252 by nixpkgs-security-tracker · opened 9d ago · 0 comments
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE 1.severity: security
#571243 by nixpkgs-security-tracker · opened 9d ago · 0 comments
Update Request: podman 5.8.8 → 6.1.4
#571094 by Jorenar · opened 9d ago · 0 comments
docling: security issues < 2.132.0 1.severity: security
#570893 by nixpkgs-security-tracker · opened 10d ago · 0 comments
Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware 1.severity: security
#570885 by nixpkgs-security-tracker · opened 10d ago · 0 comments
swift: linking packages with c++ interop fails with both gnu ld and lld
#570491 by WeetHet · opened 11d ago · 2 comments
Build failure: python312Packages.anyio
#570271 by jerome-benoit · opened 11d ago · 2 comments
python3Packages.thrift: security issues < 0.25.0 1.severity: security
#569838 by nixpkgs-security-tracker · opened 13d ago · 0 comments
Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction 1.severity: security
#569830 by nixpkgs-security-tracker · opened 13d ago · 0 comments
thrift: security issues < 0.25.0 1.severity: security
#569828 by nixpkgs-security-tracker · opened 13d ago · 0 comments
python3Packages.tornado: security issues < 6.5.9 1.severity: security
#569366 by nixpkgs-security-tracker · opened 2w ago · 0 comments
geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point 1.severity: security
#569362 by nixpkgs-security-tracker · opened 2w ago · 0 comments
urllib3: CVE-2026-97687 1.severity: security
#569318 by h0nIg · opened 2w ago · 0 comments
python3Packages.pypdf: security issues < 6.19.0 1.severity: security
#569078 by nixpkgs-security-tracker · opened 2w ago · 0 comments
Mako: Path traversal via drive-letter URI on Windows in TemplateLookup 1.severity: security
#569074 by nixpkgs-security-tracker · opened 2w ago · 0 comments
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 1.severity: security
#568639 by nixpkgs-security-tracker · opened 2w ago · 1 comments
Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation 1.severity: security
#568636 by nixpkgs-security-tracker · opened 2w ago · 0 comments
virtualenv: security issues < 21.7.13 1.severity: security
#568628 by nixpkgs-security-tracker · opened 2w ago · 0 comments
python3Packages.pyjwt: security issues < 2.15.0 1.severity: security
#568120 by nixpkgs-security-tracker · opened 2w ago · 0 comments
python3Packages.monai: security issues =< 1.6.0 1.severity: security
#567805 by nixpkgs-security-tracker · opened 2w ago · 0 comments
python3Packages.monai: security issues < 1.6.0 1.severity: security
#567804 by nixpkgs-security-tracker · opened 2w ago · 0 comments
Build failure: mlxtend
#567630 by jadewilk · opened 2w ago · 1 comments
Update Request: python3Packages.opendal 0.46.0 → 0.47.10
#567427 by attilaolah · opened 2w ago · 1 comments
icalendar: Denial of service via unbounded VALARM REPEAT expansion 1.severity: security
#566485 by nixpkgs-security-tracker · opened 3w ago · 0 comments
Update Request: python3Packages.hypothesis 6.156.1 → 6.168.1
#566233 by ilovelinux · opened 3w ago · 1 comments
Update Request: python3Packages.time-machine 3.2.0 → 3.5.1
#566210 by ilovelinux · opened 3w ago · 1 comments
psd-tools: Uncontrolled memory allocation in psd-tools composite/numpy via crafted PSD geometry 1.severity: security
#566200 by nixpkgs-security-tracker · opened 3w ago · 0 comments
netdata: security issues < 2.11.0 (backport needed) 1.severity: security
#566194 by nixpkgs-security-tracker · opened 3w ago · 0 comments
openslide: security issues < 4.0.1 1.severity: security
#564503 by nixpkgs-security-tracker · opened 4w ago · 0 comments
python3Packages.sanic: security issues < 24.12.1 (backport needed) 1.severity: security
#564493 by nixpkgs-security-tracker · opened 4w ago · 1 comments
AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION 1.severity: security
#564229 by nixpkgs-security-tracker · opened 4w ago · 0 comments
elasticsearch: consider building from source for AGPL3 license 1.severity: legal
#563962 by kuflierl · opened 4w ago · 0 comments
python3Packages.tornado: security issues < 6.5.8 1.severity: security
#563855 by nixpkgs-security-tracker · opened 4w ago · 0 comments
ASTEVAL: Sandbox Escape via BaseException Subclasses 1.severity: security
#563477 by nixpkgs-security-tracker · opened 4w ago · 1 comments
PocketSphinx: Buffer overflows in language and acoustic model loading code 1.severity: security
#563474 by nixpkgs-security-tracker · opened 4w ago · 0 comments
Build failure: emborg
#563026 by iedame · opened 4w ago · 0 comments
Build failure: beanhub-cli
#561941 by iedame · opened 5w ago · 5 comments
python3Packages.gitpython: security issues < 3.1.60 1.severity: security
#561915 by nixpkgs-security-tracker · opened 5w ago · 0 comments
libpcap: security issues < 1.10.7 1.severity: security
#560497 by nixpkgs-security-tracker · opened 5w ago · 1 comments
parsedmarc: security issues < 11.0.1 1.severity: security
#559762 by nixpkgs-security-tracker · opened 6w ago · 0 comments
LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters 1.severity: security
#559509 by nixpkgs-security-tracker · opened 6w ago · 0 comments
python3Packages.httpx2: security issues < 2.12.0 1.severity: security
#559489 by nixpkgs-security-tracker · opened 6w ago · 1 comments
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption 1.severity: security
#559072 by nixpkgs-security-tracker · opened 6w ago · 0 comments
python3Packages.pypdf: security issues < 6.16.1 1.severity: security
#559063 by nixpkgs-security-tracker · opened 6w ago · 0 comments
Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop 1.severity: security
#558816 by nixpkgs-security-tracker · opened 6w ago · 0 comments
Update Request: textual-speedups 0.2.1 → 0.2.1-unstable-2026-04-08
#557488 by devurandom · opened 6w ago · 0 comments
Update Request: glfw 3.4 → 3.5.1
#556797 by hydecnc · opened 7w ago · 0 comments
lima: fails to find virtiofsd on NixOS
#555161 by donn · opened 7w ago · 1 comments
Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth 1.severity: security
#552188 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata 1.severity: security
#552183 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
Kestra: Unauthenticated management `/worker` endpoint exposes live task configuration and plaintext credentials 1.severity: security
#552181 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
python-socketio: Binary attachment accumulation can cause denial of service 1.severity: security
#552180 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login 1.severity: security
#551114 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
mlflow: Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint 1.severity: security
#549781 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header 1.severity: security
#549106 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
Build failure: python3Packages.pysfcgal 6.topic: NLNet / NGI
#547060 by imincik · opened 2mo ago · 0 comments
Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash 1.severity: security
#546992 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
Conduit: Fails on several issues
#546754 by abhishek1297 · opened 2mo ago · 0 comments
thrift: security issues < 0.24.0 1.severity: security
#546584 by nixpkgs-security-tracker · opened 2mo ago · 2 comments
Build failure: mat2 6.topic: darwin
#546115 by ETCaton · opened 2mo ago · 0 comments
Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) 1.severity: security
#544978 by nixpkgs-security-tracker · opened 2mo ago · 3 comments
python3Packages.pyasn1: security issues < 0.6.4 1.severity: security
#544150 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
python3Packages.docling-core: security issues < 2.74.1 1.severity: security
#544144 by nixpkgs-security-tracker · opened 2mo ago · 0 comments
Update Request: scenedetect 0.6.7.1 → 0.7
#542823 by IncredibleLaser · opened 3mo ago · 1 comments
Tracking: python3Packages.sqlalchemy<2.0 EOL 6.topic: python 1.severity: security 3.skill: sprintable
#541099 by bartoostveen · opened 3mo ago · 4 comments
etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation 1.severity: security
#539902 by nixpkgs-security-tracker · opened 3mo ago · 1 comments
wagtail: security issues < 7.4.2 1.severity: security
#538203 by nixpkgs-security-tracker · opened 3mo ago · 0 comments
podman: version mismatch with netavark/aardvark-dns in nixpkgs
#536732 by RaphaelTarita · opened 3mo ago · 2 comments
plover: Crashes on launch on aarch64-linux
#536123 by Mxm40b · opened 3mo ago · 0 comments
python3Packages.kestra: security issues < 1.3.24 1.severity: security
#535958 by nixpkgs-security-tracker · opened 3mo ago · 0 comments
python3Packages.redisvl: enable `checkPhase` aspect in build
#535851 by debtquity · opened 3mo ago · 1 comments
Halo: Path Traversal in Backup Download Leads to Arbitrary File Read 1.severity: security
#535591 by nixpkgs-security-tracker · opened 3mo ago · 0 comments
python312Packages.torch: pytorch gfx1010 support (and gfx1012)
#534676 by XBagon · opened 3mo ago · 1 comments
WebOb: Location header normalization during redirect leads to open redirect 1.severity: security
#534496 by nixpkgs-security-tracker · opened 3mo ago · 0 comments
python3Packages.starlette: security issues < 1.3.1 1.severity: security
#534485 by nixpkgs-security-tracker · opened 3mo ago · 0 comments
OpenEXR: security issues < 3.4.12 1.severity: security
#533218 by nixpkgs-security-tracker · opened 3mo ago · 0 comments
python313Packages.jupyterlab: Export as PDF
#532300 by haansn08 · opened 4mo ago · 0 comments
treewide: incorrect phase for versionCheckHook
#527536 by tomasriveral · opened 4mo ago · 0 comments
netdata: no local dashboard
#527521 by wmertens · opened 4mo ago · 4 comments
bugwarrior: Transient dependency on taskwarrior2 via taskw breaks interaction with tasks 6.topic: python
#527137 by miguelpduarte · opened 4mo ago · 1 comments
Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service 1.severity: security
#527003 by nixpkgs-security-tracker · opened 4mo ago · 0 comments
Closed or merged in the synced window 59
openvino: SIGILLs on aarch64-linux
#573088 by tlvince · closed 2d ago · 0 comments
Build failure: python3Packages.sqliteschema
#573084 by h0nIg · closed 1d ago · 1 comments
Build failure: sphinx
#572919 by h0nIg · closed 1d ago · 2 comments
Build failure: semgrep
#571045 by l0b0 · closed 6d ago · 1 comments
Build failure: duckdb, aarch64 on hydra: log limit exceeded
#570642 by lorinder · closed 10d ago · 1 comments
Update Request: kanidm 1.11 → 1.12
#569836 by ser · closed 13d ago · 2 comments
Build failure: zeroc-ice
#568863 by toastal · closed 8d ago · 0 comments
JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard 1.severity: security
#568637 by nixpkgs-security-tracker · closed 2w ago · 0 comments
JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json) 1.severity: security
#568631 by nixpkgs-security-tracker · closed 2w ago · 0 comments
JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs 1.severity: security
#568622 by nixpkgs-security-tracker · closed 2w ago · 0 comments
python3Packages.pyjwt: security issues < 2.14.0 1.severity: security
#568118 by nixpkgs-security-tracker · closed 2w ago · 0 comments
vllm: security issues < 0.29.0 1.severity: security
#567655 by nixpkgs-security-tracker · closed 2d ago · 1 comments
vector: security issues < 0.57.0 (backport needed) 1.severity: security
#566188 by nixpkgs-security-tracker · closed 3w ago · 5 comments
inventree: security issues < 1.4.0 1.severity: security
#565734 by nixpkgs-security-tracker · closed 12d ago · 0 comments
vllm: CVE-2026-93592 and CVE-2026-93840 1.severity: security
#564858 by nixpkgs-security-tracker · closed 2d ago · 1 comments
Stanza: Zip Slip Path Traversal in Model/Resource Extraction 1.severity: security
#564239 by nixpkgs-security-tracker · closed 4w ago · 1 comments
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions 1.severity: security
#564227 by nixpkgs-security-tracker · closed 2d ago · 1 comments
pipx: Tests failing
#563849 by frlan · closed 3w ago · 2 comments
Update Request: `python3Packages.dulwich` 1.2.10 → 1.2.15
#563603 by Jayman2000 · closed 4w ago · 0 comments
Build failure: python3Packages.ifcopenshell
#563327 by secretmango · closed 4w ago · 1 comments
vllm: security issues < 0.28.0 1.severity: security
#562846 by nixpkgs-security-tracker · closed 2d ago · 2 comments
Build failure: btrsync
#562826 by iedame · closed 3w ago · 0 comments
consul: security issues < 2.0.4 1.severity: security
#562165 by nixpkgs-security-tracker · closed 3w ago · 6 comments
Build failure: python3Packages.torch
#560210 by anund · closed 13d ago · 7 comments
python3Packages.pyopenjtalk-plus: fails to build on aarch64-linux
#560140 by hesprs · closed 5w ago · 1 comments
Build failure: python314Packages.pyqt5
#559671 by Zariel · closed 6w ago · 2 comments
Build failure: python314Packages.pyqt5
#559458 by ETCaton · closed 6w ago · 2 comments
Update Request: bgutil-ytdlp-pot-provider 1.3.1 → 1.3.2
#558607 by zdhd122a · closed 4w ago · 3 comments
Build failure: notmuch
#556557 by jian-lin · closed 7w ago · 2 comments
Build failure: python3Packages.nidaqmx
#555511 by Sigmanificient · closed 5w ago · 0 comments
python3Packages.fastmcp-slim: Python 3.14 partial annotations are lost 6.topic: python
#553478 by TyceHerrman · closed 8w ago · 0 comments
nanoemoji: incorrect hash
#552793 by matty-kuhn · closed 2mo ago · 3 comments
Build failure: python3Packages.plumbum on aarch64-darwin
#551001 by mnixry · closed 2mo ago · 0 comments
Build failure: typing-inspection
#550910 by h0nIg · closed 6w ago · 5 comments
gitpython: security issues < 3.1.51 (needs backport) 1.severity: security
#548548 by nixpkgs-security-tracker · closed 5w ago · 1 comments
Build failure: cot, pythonPackages.cot
#548249 by Sigmanificient · closed 6w ago · 0 comments
datamodel-code-generator: security issues < 0.64.0 (backports needed) 1.severity: security
#546984 by nixpkgs-security-tracker · closed 5w ago · 1 comments
locate: services.locate.output not working
#546702 by sjau · closed 3d ago · 1 comments
Build failure: python3Packages.optuna
#546518 by amarshall · closed 4w ago · 1 comments
semgrep: pytest checkPhase segfaults (SIGSEGV) on aarch64-linux
#543951 by stationedK-06 · closed 10d ago · 1 comments
ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) 1.severity: security
#539898 by nixpkgs-security-tracker · closed 4w ago · 0 comments
NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read 1.severity: security
#534492 by nixpkgs-security-tracker · closed 3w ago · 1 comments
Typesense: security issues < 29.1 1.severity: security
#531281 by nixpkgs-security-tracker · closed 2w ago · 1 comments
Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components 1.severity: security
#520506 by nixpkgs-security-tracker · closed 5w ago · 1 comments
Wagtail: Improper permission handling when comparing revisions 1.severity: security
#519395 by nixpkgs-security-tracker · closed 5w ago · 1 comments
LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass 1.severity: security
#513915 by nixpkgs-security-tracker · closed 5w ago · 1 comments
minio: package abandoned by upstream 1.severity: security 5.scope: tracking
#490996 by britter · closed 3h ago · 36 comments
optuna-dashboard: Updated to broken pre-release 2.status: stale
#441996 by Bohreromir · closed 3w ago · 0 comments
Build failure: rfcat 6.topic: python 2.status: stale
#425342 by D3vil0p3r · closed 2mo ago · 0 comments
docker: Missing forward rules for custom bridge network
#417641 by dschanoeh · closed 4w ago · 12 comments
Investigate various Python packages pinned to pre-2020 unstable commits 6.topic: python 3.skill: sprintable 3.skill: good-first-bug
#410837 by mweinelt · closed 7w ago · 25 comments
libvirt: passt not in service path
#400643 by Readf0x · closed 6mo ago · 3 comments
openvino: CPU plugin missing on ARM 2.status: stale
#388048 by smaeul · closed 2w ago · 3 comments
Update request: swift 5.8 → 6 6.topic: swift
#343210 by 223740 · closed 4w ago · 62 comments
minio: nixos module uses deprecated --config-dir 2.status: stale
#288175 by sedlund · closed 3h ago · 4 comments
python3Packages.torchvision: `UserWarning: Failed to load image Python extension: .../image.so` 6.topic: python 2.status: stale
#162286 by samuela · closed 12d ago · 5 comments
minio: allow declarative bucket creation 6.topic: nixos 2.status: stale
#89559 by davidak · closed 3h ago · 5 comments