Beveiligingsadvies

CVE-2025-32435

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-15 22:19:46

Laatst bijgewerkt 2025-04-16 13:32:55

Toegewezen door GitHub_M

CVSS-score 2.6

Status PUBLISHED

Beschrijving

Hydra is a Continuous Integration service for Nix based projects. Evaluation of untrusted non-flake nix code could potentially access secrets that are accessible by the hydra user/group. This should not affect the signing keys, that are owned by the hydra-queue-runner and hydra-www users respectively.

← Alle CVE's bekijken Bekijk op cve.org ↗