Nixpkgs security tracker

Untriaged

Permalink CVE-2026-24825

created 2 months, 2 weeks ago

a memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/yajl modules). This vulnerability is associated with program files yail_tree.C. This issue affects ydb: through 24.4.4.2.

References

https://github.com/ydb-platform/ydb/pull/17570 patch

Affected products

ydb

=<24.4.4.2

Matching in nixpkgs

pkgs.keydb

Multithreaded Fork of Redis

nixos-unstable 6.3.4
- nixpkgs-unstable 6.3.4
- nixos-unstable-small 6.3.4

pkgs.sydbox

Seccomp-based application sandbox

nixos-unstable 3.37.2
- nixpkgs-unstable 3.37.2
- nixos-unstable-small 3.37.2
nixos-25.11 3.45.0
- nixpkgs-25.11-darwin 3.45.0

pkgs.pgcopydb

Copy a Postgres database to a target Postgres server (pg_dump | pg_restore on steroids

nixos-unstable 0.17
- nixpkgs-unstable 0.17
- nixos-unstable-small 0.17
nixos-25.11 0.17
- nixpkgs-25.11-darwin 0.17

pkgs.dragonflydb

Modern replacement for Redis and Memcached

nixos-unstable 0.1.0
- nixpkgs-unstable 0.1.0
- nixos-unstable-small 0.1.0
nixos-25.11 1.34.2
- nixpkgs-25.11-darwin 1.34.2

pkgs.perlPackages.BerkeleyDB

Perl extension for Berkeley DB version 2, 3, 4, 5 or 6

nixos-unstable 0.65
- nixpkgs-unstable 0.65
- nixos-unstable-small 0.65
nixos-25.11 0.65
- nixpkgs-25.11-darwin 0.65

pkgs.python312Packages.pydbus

Pythonic DBus library

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-25.11 0.6.0
- nixpkgs-25.11-darwin 0.6.0

pkgs.python312Packages.tinydb

Lightweight document oriented database written in Python

nixos-unstable 4.8.2
- nixpkgs-unstable 4.8.2
- nixos-unstable-small 4.8.2
nixos-25.11 4.8.2
- nixpkgs-25.11-darwin 4.8.2

pkgs.python313Packages.pydbus

Pythonic DBus library

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0
nixos-25.11 0.6.0
- nixpkgs-25.11-darwin 0.6.0

pkgs.python313Packages.tinydb

Lightweight document oriented database written in Python

nixos-unstable 4.8.2
- nixpkgs-unstable 4.8.2
- nixos-unstable-small 4.8.2
nixos-25.11 4.8.2
- nixpkgs-25.11-darwin 4.8.2

pkgs.google-alloydb-auth-proxy

Utility for connecting securely to your AlloyDB instances

nixos-unstable 1.13.4
- nixpkgs-unstable 1.13.4
- nixos-unstable-small 1.13.4
nixos-25.11 1.13.8
- nixpkgs-25.11-darwin 1.13.8

pkgs.haskellPackages.BerkeleyDB

Berkeley DB binding

nixos-unstable 0.8.7
- nixpkgs-unstable 0.8.7
- nixos-unstable-small 0.8.7
nixos-25.11 0.8.7
- nixpkgs-25.11-darwin 0.8.7

pkgs.perl538Packages.BerkeleyDB

Perl extension for Berkeley DB version 2, 3, 4, 5 or 6

nixos-unstable 0.65
- nixpkgs-unstable 0.65
- nixos-unstable-small 0.65
nixos-25.11 0.65
- nixpkgs-25.11-darwin 0.65

pkgs.perl540Packages.BerkeleyDB

Perl extension for Berkeley DB version 2, 3, 4, 5 or 6

nixos-unstable 0.65
- nixpkgs-unstable 0.65
- nixos-unstable-small 0.65

pkgs.python312Packages.berkeleydb

Python bindings for Oracle Berkeley DB

nixos-unstable 18.1.14
- nixpkgs-unstable 18.1.14
- nixos-unstable-small 18.1.14
nixos-25.11 18.1.14
- nixpkgs-25.11-darwin 18.1.14

pkgs.python313Packages.berkeleydb

Python bindings for Oracle Berkeley DB

nixos-unstable 18.1.14
- nixpkgs-unstable 18.1.14
- nixos-unstable-small 18.1.14
nixos-25.11 18.1.14
- nixpkgs-25.11-darwin 18.1.14

pkgs.haskellPackages.amazonka-memorydb

Amazon MemoryDB SDK

nixos-unstable 2.0
- nixpkgs-unstable 2.0
- nixos-unstable-small 2.0
nixos-25.11 2.0-unstable-2025-04-16
- nixpkgs-25.11-darwin 2.0-unstable-2025-04-16