NixOS/nixpkgs

Escaneado el 20 jun 2026

Puntuación de riesgo/ 100

Limpio

Resumen

The repository contains 16 critical findings related to MD5 usage, all concentrated in a single LibreOffice package management script. These findings represent checksum verification for upstream dependencies rather than cryptographic security primitives. The risk to quantum resistance is minimal as this is build-time infrastructure code, not runtime cryptography.

Crítico

Alto

Medio

Bajo

Hallazgos principales

CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:25
SHA3-256 or SHA-256
Evidencia
```
md5 = x['md5']
```
CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:31
SHA3-256 or SHA-256
Evidencia
```
hash = md5
```
CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:32
SHA3-256 or SHA-256
Evidencia
```
hashtype = 'md5'
```
CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:48
SHA3-256 or SHA-256
Evidencia
```
print('    md5 = "{}";'.format(md5))
```
CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:49
SHA3-256 or SHA-256
Evidencia
```
print('    md5name = "{}-{}";'.format(md5 or upstream_sha256,tarball))
```

+ 11 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis