From e0b4f1c50c47509999e09ab617fb56785d6218a9 Mon Sep 17 00:00:00 2001
From: Sefa Eyeoglu <contact@scrumplex.net>
Date: Wed, 2 Sep 2026 23:00:18 +0200
Subject: [PATCH] immich: add knownVulnerabilities

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
---
 pkgs/by-name/im/immich/package.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/by-name/im/immich/package.nix b/pkgs/by-name/im/immich/package.nix
index e94ad087378e..a00894cd16af 100644
--- a/pkgs/by-name/im/immich/package.nix
+++ b/pkgs/by-name/im/immich/package.nix
@@ -311,6 +311,11 @@ stdenv.mkDerivation (finalAttrs: {
       Scrumplex
       titaniumtown
     ];
+    knownVulnerabilities = [
+      "Immich 2.x.x will not receive further updates. Immich 3.x.x is available in NixOS 26.11 (unstable at the time of writing)"
+      "CVE-2026-59258"
+      "CVE-2026-82272"
+    ];
     platforms = lib.platforms.linux ++ lib.platforms.freebsd;
     mainProgram = "server";
   };