Nix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers to replace current source code with attacker-controlled source code by luring a maintainer into accepting a malicious pull request.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nix | Ubuntu | mantic | * |
| Nix | Ubuntu | upstream | * |