- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 10 · 4 high, 5 medium, 1 low
- Registry
- pkg.go.dev
Advisories 10
- CVE-2026-41685Medium 4.3
Incus: Unbounded binary import disk exhaustion
Affected: through 6.23.0.
- CVE-2026-41684Medium 6.5
Incus: Nil Dereferences on Restore via Malformed YAML
Affected: through 6.23.0.
- CVE-2026-41648Medium 5.3
Incus: Unbounded YAML Metadata Decode via Parsing
Affected: through 6.23.0.
- CVE-2026-41647Medium 6.5
Incus: Nil-Pointer Dereference via S3 Bucket Import
Affected: through 6.23.0.
- CVE-2026-40251High 7.1
Incus out-of-bounds panic in snapshot metadata handling allows denial of service
Affected: fixed in 7.0.0.
- CVE-2026-40243Low 2.3
Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation
Affected: fixed in 7.0.0.
- CVE-2026-40197High 7.1
Incus nil-pointer dereference in custom volume import allows denial of service
Affected: fixed in 7.0.0.
- CVE-2026-40195High 7.1
Incus nil-pointer dereference in storage bucket import allows denial of service
Affected: fixed in 7.0.0.
- CVE-2026-35527Medium 5.3
Incus blind SSRF via image import preflight HEAD request
Affected: fixed in 7.0.0.
- CVE-2026-23954High 8.7
Incus container image templating arbitrary host file read and write
Affected: all versions.