NixOS is a Linux distribution built on top of the Nix package manager. It is completely declarative, its system configurations are reproducible, makes configuration changes reliable and atomic, and eliminates configuration drift.

NixOS

Wolfi is a community Linux OS designed for the container and cloud-native era; it is a Linux distribution based on Alpine.

Wolfi

Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

Homebrew is a free and open-source software package management system that simplifies the installation of software on Apple's macOS operating system and Linux. The name is intended to suggest the idea of building software on the Mac depending on the user's taste. Originally written by Max Howell, the package manager has gained popularity in the Ruby on Rails community and earned praise for its extensibility.

Homebrew

Cross Site Scripting (XSS) vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain sensitive information via the title parameter when creating an album.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-91782	LOW	1.9	NixOS	binutils	No	No	Sep 15, 2026
CVE-2026-91781	LOW	1.9	NixOS	binutils	No	Yes	Sep 15, 2026
CVE-2026-91780	LOW	1.9	NixOS	binutils	No	No	Sep 15, 2026
CVE-2026-91779	LOW	1.9	NixOS	binutils	No	No	Sep 15, 2026
CVE-2026-90831	LOW	1.9	NixOS	gcc-toolset-15-binutils-devel	No	Yes	Sep 14, 2026

CVE-2024-25807:
NixOS vulnerability analysis and mitigation

6.1

Related NixOS vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2024-25807: NixOS vulnerability analysis and mitigation