NixOS is a Linux distribution built on top of the Nix package manager. It is completely declarative, its system configurations are reproducible, makes configuration changes reliable and atomic, and eliminates configuration drift.

NixOS

Homebrew is a free and open-source software package management system that simplifies the installation of software on Apple's macOS operating system and Linux. The name is intended to suggest the idea of building software on the Mac depending on the user's taste. Originally written by Max Howell, the package manager has gained popularity in the Ruby on Rails community and earned praise for its extensibility.

Homebrew

Calibre is a powerful and easy to use e-book manager that allows you to organize, save and manage e-books of various types and formats. It provides a wide range of features including library management, e-book conversion, syncing to e-book reader devices, fetching news from the web and converting it into e-book form, viewing different e-book formats, and editing e-books. Calibre supports a variety of formats and syncing with a variety of e-book reader devices.

calibre

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

Echo

calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom template file via the --template-html or --template-html-index command-line options. This vulnerability is fixed in 9.2.0.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-2370	HIGH	8.8	GitLab	gitlab	No	Yes	Mar 30, 2026
CVE-2026-33206	HIGH	8.2	NixOS	calibre	No	Yes	Mar 27, 2026
CVE-2026-33868	MEDIUM	6.1	NixOS	mastodon	No	Yes	Mar 27, 2026
CVE-2026-33869	MEDIUM	4.8	NixOS	cpe:2.3:a:joinmastodon:mastodon	No	Yes	Mar 27, 2026
CVE-2026-33205	MEDIUM	4.8	NixOS	cpe:2.3:a:calibre-ebook:calibre	No	Yes	Mar 27, 2026

CVE-2026-25731:
NixOS vulnerability analysis and mitigation

7.8

Related NixOS vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2026-25731: NixOS vulnerability analysis and mitigation