← All distributions
Updated 19:01
Determinate Secure Packages distribution
secure-packages-rollingSupportedFIPS supported
Built on Nixpkgs master. Available for use in production environments and covered by our standard service-level agreement (SLA).
Fixed in the last 30 days
234
Fixed in the last 7 days
119
In progress
370
Use this distribution
Customers onlyDeterminate Secure Packages is available through FlakeHub to organizations with access. Not a customer yet? Get in touch to gain access or schedule a demo.
Standardflake.nix
{
inputs.nixpkgs.url = "https://flakehub.com/f/DeterminateSystems/secure-packages-rolling/0";
}FIPS variant
FIPS variantflake.nix
{
inputs.nixpkgs.url = "https://flakehub.com/f/DeterminateSystems/secure-packages-rolling-fips/0";
}The FIPS variant is the package set with Federal Information Processing Standards (FIPS) mode enabled. Using the FIPS variant has the details.
604 CVEs tracked
| CVE | Status | Severity | Summary | Fixed |
|---|---|---|---|---|
| In progress | Medium | GHSA-qwm4-qh6w-59xr: pip mishandles doubly-encoded package URLs, enabling arbitrary file writes via malicious indexes during wheel installs | — | |
| In progress | High | GHSA-94p9-xgh2-xp45: No sha256 verification for network-fetched wheels; virtualenv may cache and seed tampered wheels | — | |
| In progress | Medium | PYSEC-2026-3943: WebOb Location normalization allows off-host redirects via leading space/C0 control stripping mismatch | — | |
| In progress | Medium | GHSA-x33g-cr3x-6449: PyJWT accepts inconsistent OKP JWKs: mismatched x and d allow DPoP binding bypass | — | |
| In progress | Medium | PYSEC-2026-4141: PyJWT deeply nested payload triggers uncaught RecursionError pre-verification, causing request-level DoS | — | |
| In progress | High | PYSEC-2026-4183: PyJWT 2.1.0–2.15.0 OKPAlgorithm.from_jwk x/d mismatch enables stolen token misuse | — | |
| In progress | Medium | PYSEC-2026-3721: pip arbitrary file write via doubly-encoded index URLs, affecting --only-binary wheel downloads | — | |
| In progress | Medium | GHSA-6hr6-w5qg-qmwg: h2 <=4.4.0 forwards multiple Host headers, enabling HTTP/1.1 downgrade request smuggling | — | |
| In progress | High | PYSEC-2026-4013: Double-quoted shlex placeholders in activate/activate.fish allow execution via path metacharacters | — | |
| In progress | Medium | GHSA-9h9j-4vrj-gf7g: Newline injection via virtualenv prompt overrides pyvenv.cfg home and interpreter metadata | — | |
| In progress | Medium | GHSA-42vr-xj54-vc7v: Deeply nested JWT JSON payload triggers uncaught RecursionError pre-verification, causing DoS in PyJWT 2.x | — | |
| In progress | High | GHSA-c3jg-qh8m-j3h2: CairoSVG path parsing and marker handling are O(n^2), enabling DoS on large SVGs | — | |
| In progress | High | GHSA-mpf4-983q-p7j4: Tornado urlencoded parsing without max_num_fields allows single-request event-loop DoS | — | |
| In progress | Medium | GHSA-3hv7-mjh2-fv65: HTTPServerRequest query parsing missing field-count limit; enables DoS via many query parameters. | — | |
| In progress | High | GHSA-c2m8-h5v5-343r: Tornado StaticFileHandler symlink traversal allows unauthenticated arbitrary file read via symlinks in static root | — | |
| In progress | High | PYSEC-2026-3928: parse_qs without max_num_fields stalls Tornado event loop with massive form fields | — | |
| In progress | High | GHSA-chx6-46f5-w4vp: Unbounded decompressed response accumulation in Tornado CurlAsyncHTTPClient triggers OOM DoS | — | |
| In progress | Medium | GHSA-6hx8-3wjj-gr8g: WebOb open redirect: leading whitespace/C0 controls bypass guards; urljoin strips, off-host redirects | — | |
| In progress | Medium | GHSA-8423-8fgw-73vq: parse_multipart_form_data splits before max_parts check, causing pre-auth memory amplification DoS | — | |
| In progress | Medium | PYSEC-2026-3628: h2 <=4.4.0 forwards multiple Host headers; HTTP/2 to HTTP/1.1 downgrade enables request smuggling | — | |
| In progress | Medium | GHSA-379c-qx7v-6h59: Path traversal in folder-based dataset builders via unvalidated file_name, allowing arbitrary file reads through v5.0.0 | — | |
| In progress | Medium | GHSA-hj66-6f7g-4r5v: oauthlib RevocationEndpoint JSONP callback unvalidated enables arbitrary JavaScript injection in responses | — | |
| In progress | Medium | GHSA-5639-2j2p-m4mx: Windows: Drive-letter URIs bypass Mako TemplateLookup directory traversal guard; arbitrary file read | — | |
| In progress | Medium | GHSA-4xgf-cpjx-pc3j: pydantic-settings NestedSecretsSettingsSource follows symlinks, allowing out-of-tree reads and size cap bypass | — | |
| In progress | Medium | PYSEC-2026-4113: oauthlib RevocationEndpoint JSONP reflects unsanitized callback, enabling arbitrary JavaScript injection | — | |
| In progress | Medium | GHSA-xpv3-w29h-x7cv: oauthlib PKCE timing side-channel: code_challenge_method_plain uses == for verifier comparison | — | |
| In progress | High | GHSA-xf7x-x43h-rpqh: SchemaRepairer.resolve_schema circular $ref causes unbounded CPU loop DoS | — | |
| In progress | High | PYSEC-2026-3804: Hugging Face Accelerate <=1.14.0 path traversal in checkpoint loading enables arbitrary file read, DoS | — | |
| In progress | Medium | PYSEC-2026-3716: Arbitrary file read via path traversal in Datasets <=5.0.0 folder-based builders | — | |
| In progress | High | GHSA-4j2p-28q2-5m79: Hugging Face Accelerate ≤1.14.0 path traversal via weight_map enables arbitrary file read, DoS via pipes | — | |
| In progress | Medium | PYSEC-2026-4114: OAuthlib PKCE verifier comparison uses '==' causing timing side-channel in authorization code flow | — | |
| In progress | Low | GHSA-wwv5-g3v4-889x: Tornado set_cookie kwargs capitalization regression bypasses validation, enabling cookie attribute injection | — | |
| In progress | Medium | GHSA-54p9-h82j-f925: multidict 6.7–6.9 C items-view union/subtraction ref leak allows remote unreclaimable memory growth | — | |
| In progress | Medium | PYSEC-2026-1845: pytest ≤9.0.2 UNIX uses /tmp/pytest-of-{user} dirs enabling local DoS/privilege escalation | — | |
| In progress | Medium | GHSA-6w46-j5rx-g56g: UNIX pytest through 9.0.2 predictable /tmp/pytest-of-{user} dirs allow DoS/privilege escalation | — | |
| In progress | Medium | GHSA-j934-xhv5-fg8f: Unanchored RE_WS_END search causes quadratic-time slowdown on long selector whitespace/comments | — | |
| In progress | Medium | GHSA-gjv8-xp57-g29c: CSS selector ReDoS in soupsieve: overlapping quantifiers in IDENTIFIER cause quadratic backtracking | — | |
| In progress | Medium | GHSA-qx36-8mw2-4r3x: Key vault .sock KMS endpoint causes PyMongo to connect to attacker-chosen Unix socket | — | |
| In progress | Medium | GHSA-g6x2-hccm-hh4m: Werkzeug safe_join allows Windows device names with empty ADS, hanging send_from_directory on NTFS | — | |
| In progress | Medium | GHSA-8fvv-fgr5-f8ch: GridFS API misinterprets hash IDs as query criteria during read/write, bypassing exact match | — | |
| In progress | High | GHSA-v4x9-3549-crwv: Integer overflow in MongoDB Python Driver BSON encoder can cause out-of-bounds write with large input | — | |
| In progress | High | GHSA-vp6j-j7w5-5xjj: PyMongo connection string host parsing decodes %2C/%3A, enabling host injection | — | |
| In progress | High | GHSA-f2ff-p2ww-7p4p: sqlparse group_comments O(n²) on comment-only input causes DoS, bypasses token cap | — | |
| In progress | Medium | GHSA-cfqr-cjx5-5jcm: sqlparse ReindentFilter CPU DoS from crafted tuple lists causing quadratic offset recomputation | — | |
| In progress | High | GHSA-prg7-hcfm-mfcr: sqlparse ReDoS: quadratic lexer regex for dollar-quoted literals and multiline comments | — | |
| In progress | High | PYSEC-2026-3699: sqlparse CPU DoS from quadratic TokenList.__init__ stringification on deeply nested SQL | — | |
| In progress | Medium | PYSEC-2026-4170: ReDoS: soupsieve IDENTIFIER/VALUE regex quadratic backtracking on long failing selectors | — | |
| In progress | Medium | PYSEC-2026-4171: soupsieve css_parser ReDoS: unanchored RE_WS_END search causes O(n^2) on whitespace/comments | — | |
| In progress | Medium | GHSA-3496-9g83-7v6x: sqlparse python/php output modes allow code injection via improper backslash/quote escaping | — | |
| In progress | High | PYSEC-2026-3698: sqlparse ReDoS: dollar-quoted literal backreference and multiline comment regex cause CPU exhaustion | — |
Make CVE remediation our job, not yours.
Tell us what you run. We'll show you what Determinate Secure Packages covers, how the SLA applies, and how to get started.