pkg:Go/github.com/lxc/incus/v6/cmd/incusd

All known vulnerabilities

• HIGH8.7CVE-2026-23954Incus container image templating arbitrary host file read and write in github.com/lxc/incus
  from 0
• MEDIUM6.5CVE-2026-41684Incus has Nil Dereferences on Restore via Malformed YAML
  from 0, <= 6.23.0
• MEDIUM6.5CVE-2026-41647Incus has Nil-Pointer Dereference via S3 Bucket Import
  from 0, <= 6.23.0
• MEDIUM6.5Incus Vulnerable to Panic via Snapshot Bounds Check
  from 0, < 7.0.0
• MEDIUM6.5Incus has a Nil-Pointer Dereference via Custom Volume Import
  from 0, < 7.0.0
• MEDIUM6.5Incus has a Nil-Pointer Dereference Panic via Bucket Metadata
  from 0, < 7.0.0
• MEDIUM5.0Incus has Unbounded YAML Metadata Decode via Parsing
  from 0, <= 6.23.0
• MEDIUM4.3Incus is affected by unbounded binary import disk exhaustion
  from 0, <= 6.23.0
• MEDIUM4.3Incus has Blind SSRF via Image Import Preflight HEAD
  from 0, < 7.0.0
• LOW2.3Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots
  from 0, < 7.0.0