Skip to content
OpenAdvisories

Package · Go

github.com/lxc/incus/v6/client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.7
    CVE-2026-33542

    Incus does not verify combined fingerprint when downloading images from simplestreams servers

    Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances expos…

    lxc incus lxd incus Debian Ubuntu Go