[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNKdd6NYTumFzFyuX6H2vn_ZTMTXpsV_fnCxqObyr_t8":3,"g5a-risk:CVE-2025-32435":120},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":62,"weaknesses":63,"weaknessesCount":43,"isActivelyExploited":72,"cisaInfo":27,"otxData":27,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":108,"notableEvents":109},"CVE-2025-32435","What is CVE-2025-32435?","Hydra is a Continuous Integration service for Nix based projects. Evaluation of untrusted non-flake nix code could potentially access secrets that are accessible by the hydra user\u002Fgroup. This should not affect the signing keys, that are owned by the hydra-queue-runner and hydra-www users respectively.","Hydra is a Continuous Integration service for Nix based projects. Evaluation of untrusted non-flake nix code could potentially access secrets that are access...","2025-04-15T23:15:42.983","2025-09-22T14:56:23.283",2.6,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","LOW","REQUIRED","UNCHANGED","NONE",null,1.2,1.4,[],[],0.00355,[34,34,34,35,35,35,32],0.00312,0.00349,"Low",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"nixos","hydra","*","cpe:2.3:a:nixos:hydra:*:*:*:*:*:*:*:*",1,[45,50,54,58],{"url":46,"source":47,"tags":48},"https:\u002F\u002Fgithub.com\u002FNixOS\u002Fhydra\u002Fcommit\u002F8d750265135b7e203520036a742afdf301b4013f","GitHub",[49],"Patch",{"url":51,"source":47,"tags":52},"https:\u002F\u002Fgithub.com\u002FNixOS\u002Fhydra\u002Fsecurity\u002Fadvisories\u002FGHSA-j7w7-965w-vjxw",[53],"Vendor Advisory",{"url":55,"source":47,"tags":56},"https:\u002F\u002Fgithub.com\u002FNixOS\u002Fnixpkgs\u002Fpull\u002F397919",[57],"Issue Tracking",{"url":59,"source":47,"tags":60},"https:\u002F\u002Fgithub.com\u002Fnix-community\u002Fnix-eval-jobs\u002Freleases\u002Ftag\u002Fv2.28.1",[61],"Release Notes",4,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-95","Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')","The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. \"eval\").","This may allow an attacker to execute arbitrary code, or at least modify what code can be executed.","Incomplete","Variant","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2025-32435? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-32435, a low severity cyber security vulnerability from 2025. Hydra is a Continuous Integration service for Nix based proj...","CVE-2025-32435, CVE-2025-32435 vulnerability, CVE-2025-32435 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, nixos security, hydra vulnerability","\u002Fwhat-is\u002Fcve-2025-32435",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-32435","Cybersecurity","CVE-2025-32435, CVE-2025-32435 vulnerability, CVE-2025-32435 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":27,"Negate":27,"Nodes":101},[102],{"Operator":103,"Negate":72,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":107,"VersionEndIncluding":27},"BB249A55-0C8D-4F0B-8F13-35CB2B39810A","2025-04-11",[],[110],{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"02118369-017c-4668-bda3-708b51d0d2f5","NEW_NVD","2025-04-16T02:15:44.804315+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":118,"version":119},1792269983065,"2.0",{"score":121,"band":122,"action":123,"scoredAt":124},11,"Info","Track","2026-10-16T07:06:52.80424+00:00"]