Nixpkgs Security Tracker

Untriaged

Permalink CVE-2026-24825

created 2 weeks, 1 day ago

a memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/yajl modules). This vulnerability is associated with program files yail_tree.C. This issue affects ydb: through 24.4.4.2.

Affected products

ydb

=<24.4.4.2

Matching in nixpkgs

pkgs.keydb

Multithreaded Fork of Redis

nixos-25.05 6.3.4
- nixos-25.05-small 6.3.4
- nixpkgs-25.05-darwin 6.3.4

pkgs.sydbox

Seccomp-based application sandbox

nixos-unstable 3.45.0
- nixpkgs-unstable 3.45.0
- nixos-unstable-small 3.45.0
nixos-25.05 3.39.1
- nixos-25.05-small 3.39.1
- nixpkgs-25.05-darwin 3.39.1

pkgs.pgcopydb

Copy a Postgres database to a target Postgres server (pg_dump | pg_restore on steroids

nixos-unstable 0.17
- nixpkgs-unstable 0.17
- nixos-unstable-small 0.17
nixos-25.05 0.15
- nixos-25.05-small 0.15
- nixpkgs-25.05-darwin 0.15

pkgs.dragonflydb

Modern replacement for Redis and Memcached

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
- nixos-unstable-small 1.34.2
nixos-25.05 0.1.0
- nixos-25.05-small 0.1.0
- nixpkgs-25.05-darwin 0.1.0

pkgs.perlPackages.BerkeleyDB

Perl extension for Berkeley DB version 2, 3, 4, 5 or 6

nixos-unstable 0.65
- nixpkgs-unstable 0.65
- nixos-unstable-small 0.65
nixos-25.05 0.65
- nixos-25.05-small 0.65
- nixpkgs-25.05-darwin 0.65

pkgs.python312Packages.pydbus

Pythonic DBus library

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-25.05 0.6.0
- nixos-25.05-small 0.6.0
- nixpkgs-25.05-darwin 0.6.0

pkgs.python312Packages.tinydb

Lightweight document oriented database written in Python

nixos-unstable 4.8.2
- nixpkgs-unstable 4.8.2
- nixos-unstable-small 4.8.2
nixos-25.05 4.8.2
- nixos-25.05-small 4.8.2
- nixpkgs-25.05-darwin 4.8.2

pkgs.python313Packages.pydbus

Pythonic DBus library

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-25.05 0.6.0
- nixos-25.05-small 0.6.0
- nixpkgs-25.05-darwin 0.6.0

pkgs.python313Packages.tinydb

Lightweight document oriented database written in Python

nixos-unstable 4.8.2
- nixpkgs-unstable 4.8.2
- nixos-unstable-small 4.8.2
nixos-25.05 4.8.2
- nixos-25.05-small 4.8.2
- nixpkgs-25.05-darwin 4.8.2

pkgs.google-alloydb-auth-proxy

Utility for connecting securely to your AlloyDB instances

nixos-unstable 1.13.8
- nixpkgs-unstable 1.13.8
- nixos-unstable-small 1.13.8
nixos-25.05 1.13.1
- nixos-25.05-small 1.13.1
- nixpkgs-25.05-darwin 1.13.1

pkgs.haskellPackages.BerkeleyDB

Berkeley DB binding

nixos-unstable 0.8.7
- nixpkgs-unstable 0.8.7
- nixos-unstable-small 0.8.7
nixos-25.05 0.8.7
- nixos-25.05-small 0.8.7
- nixpkgs-25.05-darwin 0.8.7

pkgs.perl538Packages.BerkeleyDB

Perl extension for Berkeley DB version 2, 3, 4, 5 or 6

nixos-unstable 0.65
- nixpkgs-unstable 0.65
- nixos-unstable-small 0.65
nixos-25.05 0.65
- nixos-25.05-small 0.65
- nixpkgs-25.05-darwin 0.65

pkgs.perl540Packages.BerkeleyDB

Perl extension for Berkeley DB version 2, 3, 4, 5 or 6

nixos-unstable 0.65
- nixpkgs-unstable 0.65
- nixos-unstable-small 0.65

pkgs.python312Packages.berkeleydb

Python bindings for Oracle Berkeley DB

nixos-unstable 18.1.14
- nixpkgs-unstable 18.1.14
- nixos-unstable-small 18.1.14
nixos-25.05 18.1.14
- nixos-25.05-small 18.1.14
- nixpkgs-25.05-darwin 18.1.14

pkgs.python313Packages.berkeleydb

Python bindings for Oracle Berkeley DB

nixos-unstable 18.1.14
- nixpkgs-unstable 18.1.14
- nixos-unstable-small 18.1.14
nixos-25.05 18.1.14
- nixos-25.05-small 18.1.14
- nixpkgs-25.05-darwin 18.1.14