Recent security vulnerabilities in Hydra

Path traversal in `/log` endpoint: arbitrary file read under `$HYDRA_DATA` · Advisory · NixOS/hydra · GitHub Stored XSS via the homepage links of projects/packages · Advisory · NixOS/hydra · GitHub were disclosed today, with the migrations merged in Hydra: Merge pull request #2032 from NixOS/xss-homepage-links · NixOS/hydra@12053f3 · GitHub Lix’s Hydra: https://git.lix.systems/lix-project/hydra/commit/b7b04cfe81764e6a5728c17d79d9826f1070a48d Hydra in Nixpkgs bumped in hydra: 0-unstable-2026-...