Lix Project vulnerabilities
We track 1 vulnerability in Lix Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 5, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Lix Project vulnerabilities
- 7.5 High severity
Nix: Uncontrolled Recursion
An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser could lead to a stack-to-heap overflow when the parser is run on a coroutine stack. The stack is allocated without a guard page, which means