Guix (Eclipse Foundation) - vulnerabilities (CVEs)

2 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-14. Vendor: Eclipse Foundation.

CVEs of Guix

• CVE-2026-103414 - CVSS 8.4 (high), 2026-10-14: The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor…
• CVE-2026-102729 - CVSS 5.9 (medium), 2026-09-29: `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id. A theme…