immich
immich 3.3.3 · pkgs/by-name/im/immich/package.nix
Health
Risk
risk 68 critical
- +60 3 open advisories
- +8 NIXPKGS-2026-2905 has a public exploit (CISA)
Version
3.3.3 no newer release known to repology
Channels
master 3.3.3 · nixos-unstable 3.3.1 · nixos-26.05 2.7.5 master is ahead of nixos-unstable, nixos-26.05
Hydra
succeeded 1d ago
Advisories
NIXPKGS-2026-2480 high 7.1 EPSS 0.4% Immich Locked Assets Remain Readable Through Albums and Shared Links · #559273
CVE-2026-82272
NIXPKGS-2026-2905 high 7.7 public exploit EPSS 0.3% Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE · #570883
CVE-2026-105764
NIXPKGS-2026-2970 medium 5.3 EPSS 0.2% Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadata · #572841
CVE-2026-108165
NIXPKGS-2026-2215 immich < 3.0.3 Shared Album Editor Ownership Takeover via updateUser fixed in master needs backport to nixos-26.05
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 3
[26.05] immich_3: init at 3.2.4
#566831 by diogotcorreia · opened 3w ago · checks pass
[Backport release-26.05] immich: 2.7.5 -> 3.0.1
#539560 by NelsonVides · opened 3mo ago
{cc,bintools}-wrapper: Prevent `NIX_HARDENING_ENABLE` clobbers
#354622 by Ericson2314 · opened 23mo ago · checks fail
Closed or merged in the synced window 12
immich: 3.3.1 -> 3.3.3
#574099 by dotlambda · merged 1d ago
immich: 3.2.4 -> 3.3.1
#571272 by diogotcorreia · merged 6d ago
immich: 3.2.2 -> 3.2.4
#567983 by dotlambda · merged 2w ago
immich: prevent node-gyp .pyc unreproducible files
#567235 by diogotcorreia · merged 2w ago
immich{,-cli,-machine-learning}: enable __structuredAttrs and strictDeps
#566887 by diogotcorreia · merged 3w ago
immich: 3.2.1 -> 3.2.2
#563707 by dotlambda · merged 4w ago
immich: 3.2.0 -> 3.2.1
#563303 by dotlambda · merged 4w ago
immich: 3.1.0 -> 3.2.0
#561952 by dotlambda · merged 5w ago
[26.05] immich: add knownVulnerabilities
#559289 by Scrumplex · merged 6w ago
[26.05] pnpm_10_latest: init at 10.34.5, migrate consumers
#558969 by geri1701 · merged 13d ago
immich: use append-only reporter for pnpm output
#554021 by dav-wolff · closed 7w ago
immich: Restore use of NixOS-provided exiftool
#533313 by stackcoder · merged 9d ago
Issues 3
Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE 1.severity: security
#570883 by nixpkgs-security-tracker · opened 10d ago · 1 comments
Unreproducible Package: immich 6.topic: reproducible builds
#566878 by diogotcorreia · opened 3w ago · 2 comments
immich: add rocm support for machine-learning 2.status: stale 6.topic: rocm
#484093 by micash545 · opened 8mo ago · 6 comments
Closed or merged in the synced window 1
immich: uses vendored exiftool, fails to read jxl meta data
#533316 by stackcoder · closed 9d ago · 0 comments