Vulnerability GHSA-xhqx-mgh3-3h7q
Advisory details are being prepared in the background.
Low Risk
LOW RISK
CVSS Score: 3.0
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
4 months ago
June 26, 2026 at 07:07 PM UTC
Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)
<7.1.0
<7.1.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 months ago
Incus has a project restriction bypass in instance copy across projects
<7.2.0 GHSA-c9f5-j9c3-mhrg
<7.2.0 GHSA-c9f5-j9c3-mhrg
Critical
4 months ago
Incus has an arbitrary file write on its client due to trusted image hash
<7.2.0 GHSA-f6m5-xw2g-xc4x
<7.2.0 GHSA-f6m5-xw2g-xc4x
Critical
4 months ago
Incus has an argument injection in backup compression algorithm leading to AFW and ACE
<7.2.0 GHSA-v6mj-8pf4-hhw4
<7.2.0 GHSA-v6mj-8pf4-hhw4
Low Risk
4 months ago
Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}
<7.1.0 GHSA-4xg6-52mh-fpw8
<7.1.0 GHSA-4xg6-52mh-fpw8
Critical
4 months ago
Incus has an arbitrary file write via path traversal in S3 multipart upload
<7.1.0 GHSA-ccjc-4qc3-jxqc
<7.1.0 GHSA-ccjc-4qc3-jxqc
Impacted packages
Timeline
Published
4 months ago
June 26, 2026 at 07:07 PM UTC
Last Modified
4 months ago
July 07, 2026 at 08:41 PM UTC