[SSLy]

I think it is https://github.com/NixOS/nix/commit/12fa019ae558641df0a23a79...

[pablo1107]

How can such a simple code change fixes such a big vulnerability?

[SSLy]

Or maybe it's https://github.com/NixOS/nix/commit/35575873813f60fff26f27a6...

the commit log is tad unclear and the GHSA writer didn't bother themselves with linking the offending code

[rstarast]

Thanks, that one seems likely.

Hmm, though this seems to affect the case-hack thingy only, which seems like a macos-specific feature...