NixOS/nixpkgs

Escaneado em 20 de jun. de 2026

Risk score/ 100

Limpo

Resumo

The repository contains 16 critical findings related to MD5 usage, all concentrated in a single LibreOffice package management script. These findings represent checksum verification for upstream dependencies rather than cryptographic security primitives. The risk to quantum resistance is minimal as this is build-time infrastructure code, not runtime cryptography.

Crítico

Alto

Médio

Baixo

Principais findings

CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:25
SHA3-256 or SHA-256
Evidência
```
md5 = x['md5']
```
CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:31
SHA3-256 or SHA-256
Evidência
```
hash = md5
```
CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:32
SHA3-256 or SHA-256
Evidência
```
hashtype = 'md5'
```
CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:48
SHA3-256 or SHA-256
Evidência
```
print('    md5 = "{}";'.format(md5))
```
CríticoMD5
pkgs/applications/office/libreoffice/generate-libreoffice-srcs.py:49
SHA3-256 or SHA-256
Evidência
```
print('    md5name = "{}-{}";'.format(md5 or upstream_sha256,tarball))
```

+ 11 findings no relatório completo

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis