Skip to content

Updated 09:00

Determinate Secure Packages CVE Remediation Dashboard

Every Common Vulnerabilities and Exposures record (CVE) in Determinate Secure Packages, we patch within our service-level agreement (SLA), rebuild, and ship to you from FlakeHub Cache. This is that work as it lands.

Fixed in the last 30 days

1007

Fixed in the last 7 days

538

In progress

972

CVE tracker

Every dot is one CVE, in the row for its severity and wearing that severity’s color. A filled dot sits on the day we shipped its fix, over the last 30 days. Hollow dots sit in the band past today’s line: the CVEs we’re working on right now.

Severity
Status

1979 of 1979 tracked CVEs shown.

Critical(174)High(788)Medium(889)Low(128)Sep 13Sep 20Sep 27Oct 4Oct 11Sep 13Sep 20Sep 27Oct 4Oct 11SeverityDay the fix shippedTodayIn progress
  • Fixed (1007)
  • In progress (972)
  • Today

About Determinate Secure Packages

Every fix on this page is one you didn’t have to make. Determinate Secure Packages watches the packages you depend on, patches them within the SLA, and ships the builds to you.

Determinate Secure Packages overview (opens in a new tab)

What you get, how it fits your Nix setup, and how to start.

determinate.systems

Documentation (opens in a new tab)

How the SLA works, which packages we cover, and how to use them.

docs.determinate.systems

Supply chain security (opens in a new tab)

Control over the code, dependencies, builds, and environments behind every system you run.

determinate.systems

CVEs at a glance

The CVEs on the timeline, counted by severity, by how much of the work is done, and by how quickly the fixes landed.

Severity

The share of tracked CVEs at each severity level.

The list below the chart has the exact count and share of each slice.
  • Critical1749%
  • High78840%
  • Medium88945%
  • Low1286%

Status

How much of the work is done and how much is in hand.

The list below the chart has the exact count and share of each slice.
  • Fixed100751%
  • In progress97249%

Time to fix

Of the 1007 CVEs fixed in the last 30 days, the share fixed the same day, the next day, and so on, counting from when work on each began.

The list after the chart has the exact count for each span of days.
  • Same day: 49 of 1007, 5%
  • 1 day: 171 of 1007, 17%
  • 2 to 3 days: 479 of 1007, 48%
  • 4 to 7 days: 111 of 1007, 11%
  • 8 to 15 days: 177 of 1007, 18%
  • 16 to 30 days: 18 of 1007, 2%
  • Over 30 days: 2 of 1007, <1%

Make CVE remediation our job, not yours.

Tell us what you run. We'll show you what Determinate Secure Packages covers, how the SLA applies, and how to get started.

Vulnerability databases

The databases the dashboard draws on. Every CVE here is one of theirs.

Contact sales

Provide us with some basic details and we'll follow up with you about , usually within one business day.

We'll only use this to get back to you. See our privacy policy (opens in a new tab). This site is protected by reCAPTCHA and the Google Privacy Policy (opens in a new tab) and Terms of Service (opens in a new tab) apply.