nexus: mark as insecure and remove inactive maintainers (#418170)

2025-06-20 19:36:48 +02:00
parent 2b2f15c03e 922fd0ed08
commit 2d08e6e8b7
1 changed files with 9 additions and 5 deletions
@@ -60,11 +60,15 @@ stdenv.mkDerivation rec {
    sourceProvenance = with lib.sourceTypes; [ binaryBytecode ];
    license = lib.licenses.epl10;
    platforms = lib.platforms.all;
-    maintainers = with lib.maintainers; [
-      aespinosa
-      ironpinguin
-      luftmensch-luftmensch
-      zaninime
+    knownVulnerabilities = [
+      "Nexus 3.77 + 3.78 fixed a bunch of security issues: https://help.sonatype.com/en/sonatype-nexus-repository-3-78-0-release-notes.html"
+      "CVE-2024-47554"
+      "CVE-2024-5764"
+      "Sonatype-2015-0286"
+      "Sonatype-2022-6438"
+      "CVE-2023-6378"
+      "CVE-2023-4218"
    ];
+    maintainers = with lib.maintainers; [ ];
  };
 }