zitadel

zitadel 2.71.7 · pkgs/by-name/zi/zitadel/package.nix

Health

Risk

risk 74 critical

+60 5 open advisories
+12 2.71.7 is behind upstream 4.19.5, a major release
+2 no meta.mainProgram, no versionCheckHook

Version

2.71.7 upstream 4.19.5

Channels

master 2.71.7 · nixos-unstable 2.71.7 · nixos-26.05 2.71.7 no channel is behind master

Hydra

succeeded 1d ago

Advisories

NIXPKGS-2026-2902 critical 9.3 EPSS 0.3% zitadel: security issues < 4.17.3 · #570425

CVE-2026-105206, CVE-2026-105207, CVE-2026-105208, CVE-2026-105209, CVE-2026-105210, CVE-2026-105211, CVE-2026-105212, CVE-2026-105213, CVE-2026-105214, CVE-2026-105215

NIXPKGS-2026-1608 high 7.5 EPSS 0.6% · #520514

CVE-2026-44671

NIXPKGS-2026-2315 high 8.2 EPSS 0.6% ZITADEL Users Can Self-Verify Email/Phone via API · #547546

CVE-2026-54693

NIXPKGS-2026-2152 high 7.4 EPSS 0.4% zitadel: security issues < 4.15.3 · #542115

CVE-2026-55669, CVE-2026-55670, CVE-2026-55671, CVE-2026-55672, CVE-2026-56664, CVE-2026-56665, CVE-2026-56666, CVE-2026-56667, CVE-2026-56668

NIXPKGS-2026-2580 medium 5.5 EPSS 0.4% ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions · #563479

CVE-2026-76081

Packaging

no meta.mainProgram no versionCheckHook

Packagewhat each field means

Description

Identity and access management platform

Homepage

https://zitadel.com/

Download page

https://github.com/zitadel/zitadel/releases

License

Apache-2.0

Platforms

25 platforms: Linux, Darwin

Source provenance

fromSource

Outputs

out

Status

not broken, not insecure, free

Position

pkgs/by-name/zi/zitadel/package.nix:154

Maintainers

nrabulinski

Version bumps 2all open bumps

zitadel: 2.71.7 -> 4.17.3, zitadel-login: init at 4.17.3, protoc-gen-js: 3.21.4 -> 4.0.2

#561044 by byteflavour · opened 5w ago

zitadel: 2.71.7 -> 4.3.0

#448518 by mlaradji · opened 12mo ago

Pull requests 3

zitadel: 2.71.7 -> 4.17.3, zitadel-login: init at 4.17.3, protoc-gen-js: 3.21.4 -> 4.0.2

#561044 by byteflavour · opened 5w ago

Zitadel: add start subcommand option

#496320 by parnavh · opened 7mo ago · checks pass

zitadel: 2.71.7 -> 4.3.0

#448518 by mlaradji · opened 12mo ago

Closed or merged in the synced window 1

pkgs/zitadel: buf resiliency & update script

#389737 by benaryorg · closed 8d ago

Issues 9

zitadel: security issues < 4.17.3 1.severity: security

#570425 by nixpkgs-security-tracker · opened 11d ago · 0 comments

ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions 1.severity: security

#563479 by nixpkgs-security-tracker · opened 4w ago · 0 comments

zitadel: security issues < 4.15.3 1.severity: security

#542115 by nixpkgs-security-tracker · opened 3mo ago · 0 comments

ZITADEL: LDAP Filter Injection in Login Flow 1.severity: security

#520514 by nixpkgs-security-tracker · opened 5mo ago · 0 comments

zitadel: Stored XSS via Default URI Redirect Leads to Account Takeover 1.severity: security

#497806 by nixpkgs-security-tracker · opened 7mo ago · 1 comments

zitadel: Account Takeover Due to Improper Instance Validation in V2 Login 1.severity: security

#497800 by nixpkgs-security-tracker · opened 7mo ago · 0 comments

ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2 1.severity: security

#497797 by nixpkgs-security-tracker · opened 7mo ago · 0 comments

zitadel: 1-Click Account Takeover via XSS in /saml-post Endpoint 1.severity: security

#497795 by nixpkgs-security-tracker · opened 7mo ago · 0 comments

Update Request: zitadel 2.71.7 → 4.0.0 2.status: stale

#431585 by TymanWasTaken · opened 14mo ago · 1 comments