CVE-2024-45845

Name of the Vulnerable Software and Affected Versions: nix versions 2.24 through 2.24.5

Description: The issue allows directory traversal via a symlink in a nar file due to mishandling of a directory containing a symlink and a directory of the same name.

Recommendations: For versions 2.24 through 2.24.5, consider restricting access to nar files and symlinks to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.