nvidia-vulkan-open-dkms 595.44.15-1
NVIDIA open kernel modules - module sources (vulkan developer branch)
config.json file.
/v1/packages/nvidia-vulkan-open-dkms/versions SHAs are authoritative.
Metadata
Relations
Depends
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| dddb75162b41head | verified | 2026-11-05 16:02 | 5 |
| 7d792ceeb040 | verified | 2026-11-05 16:02 | 5 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_soname=$(dirname "${_lib}")/$(readelf -d "${_lib}" | grep -Po 'SONAME.*: \[\K[^]]*' || true)command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
_base=$(echo ${_soname} | sed -r 's/(.*)\.so.*/\1.so/')command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
[[ -e "${_soname}" ]] || ln -s $(basename "${_lib}") "${_soname}"command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
[[ -e "${_base}" ]] || ln -s $(basename "${_soname}") "${_base}"command-substitution
in
nvidia-vulkan-utils.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
if (( $(vercmp $2 595.44.02-1) < 0)); then
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.