All products

github.com/lxc/incus/v6/cmd/incusd

Go · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Incus has Nil-Pointer Dereference via S3 Bucket ImportCVE-2026-41647 · GHSA-FWJ8-62R8-8P8M github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go Medium No fix reported
Incus has a Nil-Pointer Dereference via Custom Volume ImportCVE-2026-40197 · GHSA-R7W7-MMXR-47R9 github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go High Fix reported
Incus is affected by unbounded binary import disk exhaustionCVE-2026-41685 · GHSA-98VH-X9CX-9CFP github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go Medium No fix reported
Incus has Nil Dereferences on Restore via Malformed YAMLCVE-2026-41684 · GHSA-X5R6-JR56-89PV github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go Medium No fix reported
Incus has an OVN TLS Verification that Accepts Peer-Supplied RootsCVE-2026-40243 · GHSA-C839-4QXR-J4X3 github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go Low Fix reported
Incus has Blind SSRF via Image Import Preflight HEADCVE-2026-35527 · GHSA-8GW4-P4WQ-4HCV github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go Medium Fix reported
Incus has a Nil-Pointer Dereference Panic via Bucket MetadataCVE-2026-40195 · GHSA-GC7J-G665-RXR9 github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go High Fix reported
Incus has Unbounded YAML Metadata Decode via ParsingCVE-2026-41648 · GHSA-67WX-R9XR-X75X github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go Medium No fix reported
Incus Vulnerable to Panic via Snapshot Bounds CheckCVE-2026-40251 · GHSA-4M88-WXJ4-9QJ6 github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go High Fix reported
Incus container image templating arbitrary host file read and writeCVE-2026-23954 · GHSA-7F67-CRQM-JGH7 github.com/lxc/incus/v6/cmd/incusdgithub.com/lxc/incus/v6 Go High No fix reported