Sploitus

CVE-2024-36050

No indexed exploits for CVE-2024-36050 yet

Nix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers to replace current source code with attacker-controlled source code by luring a maintainer into accepting a malicious pull request.

Affected products
Debian, Nix
Fix
Available
CVSS 3.1
4.3 MEDIUM
EPSS
0.4% (32th percentile)
NVD status
Deferred
Published
2024-05-18
CVE-2024-36050 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2024-36050 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2024-36050 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.