Skip to content
OpenAdvisories

Package · Go

github.com/lxc/incus/v7

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-47753

    Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)

    Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateInstanceFromBackup` in `internal/server/storage/backend.go` contains a nil-pointer dereference that an authenticated user with permission to create instances in…

    lxc incus incus incus Debian Ubuntu Alpine Go
  • Medium 5.3
    CVE-2026-35527

    Incus blind SSRF via image import preflight HEAD request

    Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image import flow issues an outbound HEAD request to a user-supplied URL before validating the request against project restrictions such as restricted.images.server…

    lxc incus incus incus Debian Ubuntu Alpine Go