nanomq

nanomq 0.25.6 · pkgs/by-name/na/nanomq/package.nix

Health

Risk

risk 31 high

+23 3 open advisories
+8 NIXPKGS-2026-2664 has a public exploit (CISA)

Version

0.25.6 no newer release known to repology

Channels

master 0.25.6 · nixos-unstable 0.25.6 · nixos-26.05 0.24.11 master is ahead of nixos-26.05

Hydra

succeeded 7mo ago

Advisories

NIXPKGS-2026-2179 medium 6.5 public exploit EPSS 0.3% NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read · #544124

CVE-2026-35217

NIXPKGS-2026-2180 medium 4.5 public exploit EPSS 0.1% NanoMQ: QUIC Dialer Close Type Confusion · #544125

CVE-2026-44640

NIXPKGS-2026-2664 low 3.7 public exploit EPSS 0.4% nanomq: security issues < 0.24.14 · #564861

CVE-2026-44639, CVE-2026-61633, CVE-2026-73863

NIXPKGS-2026-1202 fixed in master needs backport to nixos-26.05

Packaging

not read yet: the next index sweep reads it

Maintainers

sikmir

Pull requests 0

None open.

Closed or merged in the synced window 1

nanomq: 0.24.11 → 0.25.6

#512491 by sikmir · merged 2w ago

Issues 2

nanomq: security issues < 0.24.14 1.severity: security

#564861 by nixpkgs-security-tracker · opened 3w ago · 1 comments

NanoMQ: QUIC Dialer Close Type Confusion 1.severity: security

#544125 by nixpkgs-security-tracker · opened 2mo ago · 0 comments