chore: update flake.lock & sources (2026-03-21) by Reputable2772 · Pull Request #86 · Reputable2772/NixOS

Reputable2772 · 2026-03-21T16:52:56Z

Automated Pull Request for Week 12

Flakes Changelog:

• Updated input 'git-hooks':
    'github:cachix/git-hooks.nix/8baab586afc9c9b57645a734c820e4ac0a604af9' (2026-03-07)
  → 'github:cachix/git-hooks.nix/f799ae951fde0627157f40aec28dec27b22076d0' (2026-03-21)
• Updated input 'home-manager':
    'github:nix-community/home-manager/ef12a9a2b0f77c8fa3dda1e7e494fca668909056' (2026-03-13)
  → 'github:nix-community/home-manager/9670de2921812bc4e0452f6e3efd8c859696c183' (2026-03-20)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/1c1d8ea87b047788fd7567adf531418c5da321ec' (2026-03-08)
  → 'github:nix-community/nix-index-database/8faeb68130df077450451b6734a221ba0d6cde42' (2026-03-15)
• Updated input 'nix-index-database/nixpkgs':
    'github:NixOS/nixpkgs/aca4d95fce4914b3892661bcb80b8087293536c6' (2026-03-06)
  → 'github:NixOS/nixpkgs/c06b4ae3d6599a672a6210b7021d699c351eebda' (2026-03-13)
• Updated input 'nix4vscode':
    'github:nix-community/nix4vscode/8f236bbe6f32e9018f0b92fe99b9be404d8dd155' (2026-03-14)
  → 'github:nix-community/nix4vscode/266f0a0d6946a117b10b3fff94032029a91e3ef7' (2026-03-21)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/c06b4ae3d6599a672a6210b7021d699c351eebda' (2026-03-13)
  → 'github:NixOS/nixpkgs/b40629efe5d6ec48dd1efba650c797ddbd39ace0' (2026-03-18)
• Updated input 'nur':
    'github:nix-community/NUR/aa4bf823a56df05ebaa670d7f559e03fe80abcd2' (2026-03-14)
  → 'github:nix-community/NUR/b4a27c396389e2ac02413b138ba12ea9d111cb93' (2026-03-21)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/c06b4ae3d6599a672a6210b7021d699c351eebda' (2026-03-13)
  → 'github:nixos/nixpkgs/b40629efe5d6ec48dd1efba650c797ddbd39ace0' (2026-03-18)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/61df7293cf732c7b66cce7f8b46f7017e721a6cd' (2026-03-10)
  → 'github:Gerg-L/spicetify-nix/6f06ff05cd536b790b7662550a10b61a1ac4619e' (2026-03-16)
• Updated input 'stylix':
    'github:danth/stylix/c4b8e80a1020e09a1f081ad0f98ce804a6e85acf' (2026-02-28)
  → 'github:danth/stylix/3f2f9d307fe58c6abe2a16eb9b62c42d53ef5ee1' (2026-03-18)

Sources Changelog:

nix-fast-build: f5ca03a4387aecd739d60c77ae26e567481c3013 → 9c5bad875bba54351daa48a4119bfb9ba04e3e03

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

github-actions · 2026-03-21T17:10:01Z

Profile diff:

warning: unknown experimental feature 'pipe-operators'
8gj77mp3qhzg8g2wsv1xx23zv662x54p: ε → ∅, -379.2 KiB
attica: 6.23.0 → 6.24.0, -12.4 KiB
breeze: 6.6.2 → 6.6.3
breeze-icons: 6.23.0 → 6.24.0, +15.4 KiB
capnproto: 1.2.0 → 1.4.0
easyeffects: 8.1.2 → 8.1.4, +131.3 KiB
electron: 39.7.0 → 39.8.2
electron-unwrapped: 39.7.0 → 39.8.2, +39.9 KiB
font-awesome: 7.0.1 → 7.2.0, +19.4 KiB
foot: 1.26.0 → 1.26.1
frameworkintegration: 6.23.0 → 6.24.0
gpu-screen-recorder: 5.12.4 → 5.12.5
gvfs: 1.58.2 → 1.58.4
hhsrjd2pmr5pj7j4qq3mm26y0fgfyp57: ∅ → ε, +379.2 KiB
hyperv-daemons: 6.19.7 → 6.19.8
hyperv-daemons-bin: 6.19.7 → 6.19.8
initrd-linux: 6.19.7 → 6.19.8, +177.5 KiB
karchive: 6.23.0 → 6.24.0
kauth: 6.23.0 → 6.24.0
kbookmarks: 6.23.0 → 6.24.0
kcmutils: 6.23.0 → 6.24.0
kcodecs: 6.23.0 → 6.24.0
kcolorscheme: 6.23.0 → 6.24.0
kcompletion: 6.23.0 → 6.24.0
kconfig: 6.23.0 → 6.24.0
kconfigwidgets: 6.23.0 → 6.24.0
kcontacts: 6.23.0 → 6.24.0
kcoreaddons: 6.23.0 → 6.24.0
kcrash: 6.23.0 → 6.24.0
kdbusaddons: 6.23.0 → 6.24.0
kdecoration: 6.6.2 → 6.6.3
kdoctools: 6.23.0 → 6.24.0, +25.4 KiB
kfilemetadata: 6.23.0 → 6.24.0
kglobalaccel: 6.23.0 → 6.24.0
kguiaddons: 6.23.1 → 6.24.0
ki18n: 6.23.0 → 6.24.0
kiconthemes: 6.23.0 → 6.24.0
kio: 6.23.0 → 6.24.0
kirigami: 6.23.1 → 6.24.0, +4882.6 KiB
kitemmodels: 6.23.0 → 6.24.0
kitemviews: 6.23.0 → 6.24.0
kjobwidgets: 6.23.0 → 6.24.0
knewstuff: 6.23.0 → 6.24.0
knotifications: 6.23.0 → 6.24.0
kpackage: 6.23.0 → 6.24.0
kparts: 6.23.0 → 6.24.0
kpeople: 6.23.0 → 6.24.0
kpty: 6.23.0 → 6.24.0
kservice: 6.23.1 → 6.24.0
kstatusnotifieritem: 6.23.0 → 6.24.0
ktextwidgets: 6.23.0 → 6.24.0
kwallet: 6.23.0 → 6.24.0, +280.8 KiB
kwidgetsaddons: 6.23.0 → 6.24.0
kwindowsystem: 6.23.0 → 6.24.0, +21.1 KiB
kxmlgui: 6.23.0 → 6.24.0
libphonenumber: 9.0.25 → 9.0.26
librewolf: 148.0-1 → 148.0.2-2
librewolf-unwrapped: 148.0-1 → 148.0.2-2, -932.2 KiB
linux: 6.19.7 → 6.19.8
modemmanager-qt: 6.23.0 → 6.24.0, +222.8 KiB
nfs-utils: 2.8.6 → 2.8.7
nix: 2.33.3 → 2.34.1, +286.0 KiB
nix-cmd: 2.33.3 → 2.34.1, +74.0 KiB
nix-eval-jobs: 2.33.1 → 2.34.1, +36.9 KiB
nix-expr: 2.33.3 → 2.34.1, +223.8 KiB
nix-fast-build: 1.3.0 → 1.4.0, +11.2 KiB
nix-fetchers: 2.33.3 → 2.34.1, +68.7 KiB
nix-flake: 2.33.3 → 2.34.1, +8.3 KiB
nix-main: 2.33.3 → 2.34.1, +16.5 KiB
nix-store: 2.33.3 → 2.34.1, +265.6 KiB
nix-util: 2.33.3 → 2.34.1, +149.0 KiB
nixos: 26.05.20260313.c06b4ae → 26.05.20260318.b40629e, -607.2 KiB
nixos-system-lenovo-laptop: 26.05.20260313.c06b4ae → 26.05.20260318.b40629e
nixos-system-rescue: 26.05.20260313.c06b4ae → 26.05.20260318.b40629e
obs-studio: 32.0.4 → 32.1.0, +624.9 KiB
python3.13-proton-vpn-local-agent: 1.6.0 → 1.6.1
python3.13-yt-dlp-ejs: 0.5.0 → 0.7.0
qqc2-desktop-style: 6.23.0 → 6.24.0, +13.0 KiB
runc: 1.4.0 → 1.4.1, -1064.8 KiB
solid: 6.23.0 → 6.24.0
sonnet: 6.23.0 → 6.24.0
syndication: 6.23.0 → 6.24.0
thunderbird: 148.0 → 148.0.1
thunderbird-unwrapped: 148.0 → 148.0.1
turbostat: 6.19.7 → 6.19.8
vscode-extension-github-vscode-github-actions: 0.31.0 → 0.31.1, +14.6 KiB
webkitgtk: 2.50.5+abi=4.1, 2.50.5+abi=6.0 → 2.50.6+abi=4.1, 2.50.6+abi=6.0, +123.5 KiB
wrapped-obs-studio: 32.0.4 → 32.1.0
x86_energy_perf_policy: 6.18.17 → 6.18.18
yt-dlp: 2026.03.03 → 2026.03.13

Vulnerabilities in closure:
118 derivations with active advisories

Diff-1.0.2

/nix/store/sdirgc4iarzr6wwxknrmjk8ck5w205pv-Diff-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-13278 9.1

ShellCheck-0.11.0

/nix/store/497r30gdq5q9mgmwqspgax1pmax4jwk9-ShellCheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

accountsservice-23.13.9

/nix/store/s0ffbamhx22b54rlkmlfvcfbd98ln6qr-accountsservice-23.13.9.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-3297 8.1

ada-3.4.2

/nix/store/yih7n6c2lxxdmmn1vzbk3y4xqz2lg383-ada-3.4.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-9410 5.3

assimp-6.0.2

/nix/store/x07z8v79y8xnpbii0bc5y2rmpk4vp8y3-assimp-6.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-11275 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-11277 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-15538 5.3
https://nvd.nist.gov/vuln/detail/CVE-2025-11274 3.3

async-2.2.6

/nix/store/77k57f0wbzgrrf8psz7ihr672v29h1v4-async-2.2.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43138 7.8

avahi-0.8

/nix/store/2d1yhgaycd5av5fm2b25kvskp5rvy7im-avahi-0.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-26720 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68468 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68471 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-24401 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-59529 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-68276 5.5

binutils-2.42

binutils-2.44

binutils-2.44

bolt-0.9.8

/nix/store/xas498rcnqk2y8y6qp0cf9wsrarhp73d-bolt-0.9.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-31321 9.1
https://nvd.nist.gov/vuln/detail/CVE-2025-34086 8.8
https://nvd.nist.gov/vuln/detail/CVE-2021-27367 7.5
https://nvd.nist.gov/vuln/detail/CVE-2023-5214 6.5

busybox-1.37.0

/nix/store/zfkpy81ra4anfy5yl7xdjkprvrlcl50v-busybox-1.37.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-60876 6.5
https://nvd.nist.gov/vuln/detail/CVE-2025-46394 3.2

bytes-1.11.0

/nix/store/m893lr2k969751sq0nikjk8v4rph1am7-bytes-1.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25541 7.5

capstone-5.0.7

/nix/store/k64gxv50wi52576fj36r1cb6xz5hn151-capstone-5.0.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-67873 4.8
https://nvd.nist.gov/vuln/detail/CVE-2025-68114 4.8

commonmark-0.2.6.1

/nix/store/hq628zqxfp3207iqd1s2rwvfw6mac71v-commonmark-0.2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-30838 6.1

cpio-0.4.1

/nix/store/m62j90hz65vkghnn96ibp5568xiqjkza-cpio-0.4.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-38185 7.8

cryptography-46.0.4-vendor

/nix/store/zh3c0fwn5kjb6y4wcq71cahd5f2mgn9q-cryptography-46.0.4-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26007 6.5

cryptography-46.0.4-vendor-staging

/nix/store/wdwlmdks7a8wm5cmhhjq6kqjcar05fgx-cryptography-46.0.4-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26007 6.5

cups-2.4.16

/nix/store/63aiv6j0fm64pgmr4kd6j224yg0car14-cups-2.4.16.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26691 6.7

curl-0.4.49

curl-8.18.0

/nix/store/199d0lp618n16dsfz1xfxvbfn2xm6yvy-curl-8.18.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-3805 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-1965 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-3783 5.3

dash-0.5.13.1

/nix/store/6nbh92wi8ay8hkrb2kqvfikp4r46pvm7-dash-0.5.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21485 6.5

dbus-0.9.10

/nix/store/5mzrq9qcpgdwk9aslw42rskgq7bmp8y5-dbus-0.9.10.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

dbus-1

/nix/store/ma70xr3clkww6mrs9dvawwmrp03pn9jf-dbus-1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-42010 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42011 6.5
https://nvd.nist.gov/vuln/detail/CVE-2022-42012 6.5

exiv2-0.28.8

/nix/store/701wqim42gg3n6w8b3mwcmwhwnwbi68f-exiv2-0.28.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27631 5.3

ffmpeg-7.1.3

ffmpeg-8.0.1

filelock-0.1.1.8

/nix/store/q46yklfmqjm28vfhxvv12px8vjnr5f9m-filelock-0.1.1.8.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68146 6.3
https://nvd.nist.gov/vuln/detail/CVE-2026-22701 5.3

flutter-3.32.8-unwrapped

/nix/store/hzvkspda9343fd97xvsf036hdw0bc7y3-flutter-3.32.8-unwrapped.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-27704 7.5

fontforge-20251009

/nix/store/96ji801dl9fxrj5br35f5cx3y2vdib5r-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

fontforge-20251009

/nix/store/33rv4wwr1vz28g6pfww822yd50kabi12-fontforge-20251009.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15276 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15277 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-15278 7.8

freerdp-3.23.0

/nix/store/xgw0lsnqdl391krhf98ghnwi8ik9sz2c-freerdp-3.23.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-31806 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-31883 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31884 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-31885 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-29774 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-29775 5.3
https://nvd.nist.gov/vuln/detail/CVE-2026-29776 3.1
https://nvd.nist.gov/vuln/detail/CVE-2026-31897

gcc-4.6.4

/nix/store/viq5ca3fll2g4k7gzrzl0ba5f7qzqwq9-gcc-4.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-37322 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-10.4.0

/nix/store/nnpi2w564fg4sn2ngpqs9v9pa7s058dy-gcc-10.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-14.3.0

/nix/store/7i0f5gfas6iija8i31l7b2bdjpiv779i-gcc-14.3.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/6vxm25bdwjygl4ndb5vr3hfsrvfdbfdv-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

gcc-15.2.0

/nix/store/s17kqafdpsrgbfygig72hgv04vr905yw-gcc-15.2.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-4039 4.8

giflib-5.2.2

/nix/store/2d1hqd29lngn33rircf13vyr3pilazy3-giflib-5.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-26740 8.2
https://nvd.nist.gov/vuln/detail/CVE-2024-45993 6.5

git-2.53.0

/nix/store/hk6gd3pn96hbxk95adl9x0ajcs6giaf0-git-2.53.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36882 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-30947 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-36883 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-38663 6.5
https://nvd.nist.gov/vuln/detail/CVE-2021-21684 6.1
https://nvd.nist.gov/vuln/detail/CVE-2022-36884 5.3

glibc-2.40-66

/nix/store/jsrrm60pz13dd0h59549p329c8mli9qm-glibc-2.40-66.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-5702 5.6
https://nvd.nist.gov/vuln/detail/CVE-2025-5745 5.6

glibc-2.42

/nix/store/1xl049n1sic7rn3adkwnkjnvwsvad50m-glibc-2.42.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-0861 8.4
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-0915 7.5

glibc-2.42-51

/nix/store/zf7wrvp7ab5nq6x505nphqjyzv9l28dp-glibc-2.42-51.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5

glibc-2.42-51-source-unsecvars

/nix/store/i8iqjlkq36yz6387aqsd3wlgjd96k0z6-glibc-2.42-51-source-unsecvars.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-15281 7.5

go-1.22.12-linux-amd64-bootstrap

go-1.22.12-linux-386-bootstrap

go-1.25.7

/nix/store/fq8965avl2cbgcx0ni9xp7ixh8b8k2ki-go-1.25.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-49292 4.9

gstreamer-1.26.5

gzip-1.2.4

/nix/store/6hiwiz3jkxsdc3qz4dglh35xjz6qdg0j-gzip-1.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-1271 8.8

hedgehog-1.5

/nix/store/drxrxj1pkvxmy6l0qk73m55xjz021bs7-hedgehog-1.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

hedgehog-1.5-r2.cabal

/nix/store/cm00ymhcamklpjlacp845hp7g47bhr34-hedgehog-1.5-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4276 4.1

imagemagick-7.1.2-13

inetutils-2.7

/nix/store/4hag735pzj8frpncr9w0jwpxcrh6x325-inetutils-2.7.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-28372 7.4

jam-2.6.1

/nix/store/4840z7s4nr2finkkk3p9wzbbqlik7c65-jam-2.6.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jam-2.6.1.tar

/nix/store/dlxsfaxccnzdg4fnam6nm75drd4y0jlc-jam-2.6.1.tar.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-3841 3.3

jbig2dec-0.20

/nix/store/av4kwnir5a2v4i3dinjd411j53q3csa8-jbig2dec-0.20.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-46361 6.5

jose-0.11

/nix/store/xmqr0q075qb0ihsa199rfa7hy8m2ydcf-jose-0.11.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-50967 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-28176 4.9

lapack-3

/nix/store/lfd1zjzm5r70k8waq4pn63g7lpjpyyhq-lapack-3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4048 9.1

libheif-1.20.2

/nix/store/nskncwv3gqbxh4mf1cxhlw3lnkw523sr-libheif-1.20.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-68431 6.5

libmemcached-1.0.18

/nix/store/gvcpxmmkhxq3ygk0dq7ph15snx15zxnp-libmemcached-1.0.18.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-27478 6.5

libmicrohttpd-1.0.2

/nix/store/j30qhsxn5i8cqqr1qcbrbdwfcrk6d1jp-libmicrohttpd-1.0.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-59777 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-62689 7.5

libmpeg2-0.5.1

/nix/store/zdx6rr6mnlpp7y2fsankyxp5qkclbi6h-libmpeg2-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37416 6.5

libpng-1.2.59

/nix/store/lpqrjdhqx09jf0xx3mj87bhnwlilymm7-libpng-1.2.59.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25646 8.1
https://nvd.nist.gov/vuln/detail/CVE-2025-66293 7.1
https://nvd.nist.gov/vuln/detail/CVE-2025-64505 6.1

libsndfile-1.2.2

/nix/store/c14iw1sp4smsg9xac0mplzq89293w092-libsndfile-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-52194 7.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50613 6.5
https://nvd.nist.gov/vuln/detail/CVE-2024-50612 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-56226 5.3

libssh-0.11.3

/nix/store/cxdj4ln3c2z781avld5sdkx827nlvph4-libssh-0.11.3.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-3731 5.3

lua-5.2.4

/nix/store/8pykvyrqrambw41wi4lwpsb36azdinhz-lua-5.2.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

lua-5.2.4-env

/nix/store/a3pqmjn4bjrrhivc97h08s9dv06jzpgq-lua-5.2.4-env.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-43519 5.5

malcontent-0.13.1

/nix/store/qnff8c50sllyqfmbqxdc5ygbz5sl5lc2-malcontent-0.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-24845 6.5
https://nvd.nist.gov/vuln/detail/CVE-2026-28407 5.3

memcached-1.6.40

/nix/store/a1gbxlpshkmzssh9lg6b6z5rcika6b5x-memcached-1.6.40.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-26635 9.8

mercurial-7.1.2

/nix/store/pajwhrjgkg2d0il98yvjlar9jihi4k9f-mercurial-7.1.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor

/nix/store/b1ky8j68c2sngcbph283ha7r3an8za7k-mercurial-7.1.2-vendor.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

mercurial-7.1.2-vendor-staging

/nix/store/7dfnfy6k3nd8mny6gwzczkbb5lbrrmng-mercurial-7.1.2-vendor-staging.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43410 5.3

musl-1.2.5

/nix/store/x8a3l29s51zx2dgm4a78sf5zkc50lfqc-musl-1.2.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-26519 8.1

nemo-6.6.4

/nix/store/lfmsmm3hqv60xnra8cal1fcjdm334ni4-nemo-6.6.4.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-23249 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23250 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23251 7.6
https://nvd.nist.gov/vuln/detail/CVE-2025-23360 7.1

network-3.2.8.0

ninja-1.13.2

/nix/store/c6zc7kpm37qi2djx1mn4pwa0v5kp5x54-ninja-1.13.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4336 5.5

nix-0.29.0

/nix/store/c2bsj92cgihjmkb1d0a9l5p86m5l4wdr-nix-0.29.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

nix-0.31.1

/nix/store/4a1k8yfas9pngxs17as3dw2jf9cvmr6k-nix-0.31.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-27297 6.3

ocaml-5.4.0

/nix/store/lhh50waa3pgqdngkj7s58ci6r02ymlhq-ocaml-5.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-28364 7.9

onnx-1.20.1

/nix/store/l70vg1cr5g5fxdnim5c6b5mar39w7d3i-onnx-1.20.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-28500 8.6

openexr-3.3.5

/nix/store/fdkvnyfl9hzqfxhyfr0iqhl3i87laz08-openexr-3.3.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-12495 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-12839 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-12840 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-64182 7.8
https://nvd.nist.gov/vuln/detail/CVE-2026-27622 7.8
https://nvd.nist.gov/vuln/detail/CVE-2025-64181 7.5
https://nvd.nist.gov/vuln/detail/CVE-2025-64183 7.5
https://nvd.nist.gov/vuln/detail/CVE-2026-26981 6.5

openvswitch-3.7.0

/nix/store/9psd5akbyh8aa9yx7pn9lab5wbwmnk6k-openvswitch-3.7.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-5366 7.1

orc-0.4.41

/nix/store/96knc2bppd966qa5lpg0qgnzy8p5rq9f-orc-0.4.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47436 9.8

php-calendar-8.4.19

/nix/store/zbzsl8ykpbnwxb9f76n20fq3w58ysnia-php-calendar-8.4.19.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-4455 3.5

pip-20.3.4-source

/nix/store/zralz0cxw57ff3l1m1q5afy8y9rzdh9s-pip-20.3.4-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-3572 5.7
https://nvd.nist.gov/vuln/detail/CVE-2023-5752 5.5

pods-2.2.0

pods-2.2.0-vendor

pods-2.2.0-vendor-staging

polkit-1.pam

/nix/store/f623ng2hnnxj1hwng9jcvdi4vx7sm5nk-polkit-1.pam.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-4034 7.8

python-2.7.18.12

python-3.14.2

/nix/store/n7j15x478gi6pqnplzyxlpkbwxw4xiqs-python-3.14.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-49050 8.8
https://nvd.nist.gov/vuln/detail/CVE-2025-49714 7.8

rubygems-3.7.2

/nix/store/73cd4b1nvw134x41gl2s74ginlkyv2r9-rubygems-3.7.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-36073 8.3

safe-0.3.21

safe-0.3.21-r1.cabal

sassc-3.6.2

/nix/store/fz6z939nwag8ndx32vchhyygf80bvl34-sassc-3.6.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-43357 7.5

setuptools-44.0.0-source

/nix/store/2irfn2142pkwlp3hbyd8zqpv3aad3kgz-setuptools-44.0.0-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 8.8
https://nvd.nist.gov/vuln/detail/CVE-2022-40897 5.9

shellcheck-0.11.0

/nix/store/q56ibpcyijrxs7gbygy7qmdncnqjnnzy-shellcheck-0.11.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-28794 9.8

snappy-1.2.2

/nix/store/kc59vnih1kl99pa7xlwma3qw0psk7df6-snappy-1.2.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-28115 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-41330 9.8

sqlite3-2.7.6

/nix/store/g348nk445lfd72cxdni54f4rpkdz23pd-sqlite3-2.7.6.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-21227 7.5

stringbuilder-0.5.1

/nix/store/5226bv8gwy02k8f94pf12wwrjhjn0ibq-stringbuilder-0.5.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2024-21524 8.2

subversion-1.14.5

/nix/store/hd034r1yw927hsdg63d4kgx91kbldw37-subversion-1.14.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-21698 7.5
https://nvd.nist.gov/vuln/detail/CVE-2022-29046 5.4
https://nvd.nist.gov/vuln/detail/CVE-2022-29048 4.3

systemd-2.4.0

/nix/store/mrkzhzyqjlgna8yawfw14sis43dmy5mz-systemd-2.4.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26604 7.8
https://nvd.nist.gov/vuln/detail/CVE-2021-33910 5.5
https://nvd.nist.gov/vuln/detail/CVE-2022-3821 5.5
https://nvd.nist.gov/vuln/detail/CVE-2025-4598 4.7

taglib-1.13.1

/nix/store/rp93q5p9b5cvphrf5vmyx1phw2qvxxic-taglib-1.13.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-47466 2.9

tap-1.0.1

/nix/store/8n8421dlvy15ll99sxalgc71a1ljqzjv-tap-1.0.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-41940 5.4

tar-0.6.4.0

tar-0.6.4.0-r4.cabal

time-0.3.41

/nix/store/amykqw1c36as6f8y6m5x47abm0gr5y9d-time-0.3.41.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-25727 6.5

vault-0.3.1.6

warp-3.4.9

websockets-0.13.0.0

/nix/store/hi3qn2l7k0kfggr51abf26j7fxp7q19r-websockets-0.13.0.0.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

websockets-0.13.0.0-r5.cabal

/nix/store/06l5pq1wzz6nxlc6plycgc75c7h1vn06-websockets-0.13.0.0-r5.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2021-33880 5.9

wheel-0.37.1-source

/nix/store/msn6nikgd9nll5azxfgb1vvg1rwqp575-wheel-0.37.1-source.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-40898 7.5

word-wrap-0.5

/nix/store/bn1vxki565lka3cal3dhgvq9y9615n6n-word-wrap-0.5.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2023-26115 5.3

yaml-0.11.11.2

/nix/store/zdqw8j3faqy169148plyc9iipqhs91rv-yaml-0.11.11.2.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yaml-0.11.11.2-r2.cabal

/nix/store/d4y7a2gla6gbf1nh8b46w9j3kwfcgmwv-yaml-0.11.11.2-r2.cabal.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-3064 7.5
https://nvd.nist.gov/vuln/detail/CVE-2021-4235 5.5

yarn-1.22.22

/nix/store/z423pxbg1y08nrf9pybih2rbm44n253c-yarn-1.22.22.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2025-8262 4.3
https://nvd.nist.gov/vuln/detail/CVE-2025-9308 3.3

yasm-1.3.0

zlib-0.7.1.1

/nix/store/macpnwb0jg4475j2zar2rk4b45g4iqxa-zlib-0.7.1.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 9.8
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 9.8
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9

zlib-1.3.1

/nix/store/xq31vv9d86i5fb73mcl4425wj8sbzbcw-zlib-1.3.1.drv
CVE CVSSv3
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 7.8
https://nvd.nist.gov/vuln/detail/CVE-2023-6992 4.0
https://nvd.nist.gov/vuln/detail/CVE-2026-27171 2.9

chore: update flake.lock & sources (2026-03-21)

e08560e

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Reputable2772 merged commit 4c915ed into master Mar 21, 2026
1 check passed

Reputable2772 deleted the flake-update/2026-12 branch March 21, 2026 18:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update flake.lock & sources (2026-03-21) - #86

chore: update flake.lock & sources (2026-03-21)#86
Reputable2772 merged 1 commit into
masterfrom
flake-update/2026-12

Reputable2772 commented Mar 21, 2026

Uh oh!

github-actions Bot commented Mar 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Reputable2772 commented Mar 21, 2026

Uh oh!

github-actions Bot commented Mar 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant