valhalla

valhalla 3.9.0 · pkgs/by-name/va/valhalla/package.nix

Health

Risk

risk 35 high

+25 1 open advisory
+8 3.9.0 is behind upstream 3.9.1
+2 no meta.mainProgram, no versionCheckHook

Version

3.9.0 upstream 3.9.1

Channels

master 3.9.0 · nixos-unstable 3.9.0 · nixos-26.05 3.6.3 master is ahead of nixos-26.05

Hydra

succeeded 2d ago

Advisories

NIXPKGS-2026-2654 high 7.5 EPSS 0.5% Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OOM in /sources_to_targets · #564525

CVE-2026-54716

NIXPKGS-2026-1928 Valhalla has reflected XSS via unsanitized JSONP callback parameter fixed in master needs backport to nixos-26.05

Packaging

no meta.mainProgram no versionCheckHook

Packagewhat each field means

Description

Open Source Routing Engine for OpenStreetMap

Homepage

https://valhalla.readthedocs.io/

Changelog

https://github.com/valhalla/valhalla/blob/3.9.0/CHANGELOG.md

License

MIT

Platforms

45 platforms: Linux, Darwin

Source provenance

not set: built from source

Outputs

out

Status

not broken, not insecure, free

Position

pkgs/by-name/va/valhalla/package.nix:98

Maintainers

Thra11, karlbeecken

Version bumps 1all open bumps

valhalla: 3.9.0 -> 3.9.1

#573562 by r-ryantm · opened 3d ago

Pull requests 1

valhalla: 3.9.0 -> 3.9.1

#573562 by r-ryantm · opened 3d ago

Closed or merged in the synced window 2

valhalla: 3.6.3 -> 3.8.3

#547718 by karlbeecken · merged 7w ago

valhalla: 3.8.3 -> 3.9.0

#514699 by r-ryantm · merged 12d ago

Issues 1

Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OOM in /sources_to_targets 1.severity: security

#564525 by nixpkgs-security-tracker · opened 4w ago · 0 comments