NixOS hydra

• CVE-2025-54864 Medium 6.9 Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins 0.4%
• CVE-2025-54800 High 7.1 Hydra persistent XSS in build metrics 0.2%
• CVE-2025-32435 Low 2.6 Hydra no restricted eval after nix-eval-jobs migration 0.4%
• CVE-2024-45049 High 7.5 Nix Hydra Missing authentication when triggering evaluations 0.6%
• CVE-2024-32657 Medium 4.6 Hydra has persistent XSS vulnerability serving HTML build outputs 0.5%