CVE-2024-36050
May 18, 2024, 10:15 p.m.
Tags
Product(s) Impacted
Nix
- 2.22.1
Description
Nix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers to replace current source code with attacker-controlled source code by luring a maintainer into accepting a malicious pull request.
Weaknesses
Date
Published: May 18, 2024, 10:15 p.m.
Last Modified: May 18, 2024, 10:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org