10 Total advisories
10 Vulnerabilities
0 Malware
Dependency scanning
Check whether github.com/lxc/incus/v6/cmd/incusd is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
MEDIUM 6.5
CVE-2026-41647
Incus has Nil-Pointer Dereference via S3 Bucket Import
MEDIUM 6.5
CVE-2026-40197
Incus has a Nil-Pointer Dereference via Custom Volume Import
MEDIUM 4.3
CVE-2026-41685
Incus is affected by unbounded binary import disk exhaustion
MEDIUM 6.5
CVE-2026-41684
Incus has Nil Dereferences on Restore via Malformed YAML
LOW 2.3
CVE-2026-40243
Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots
MEDIUM 4.3
CVE-2026-35527
Incus has Blind SSRF via Image Import Preflight HEAD
MEDIUM 6.5
CVE-2026-40195
Incus has a Nil-Pointer Dereference Panic via Bucket Metadata
MEDIUM 5.0
CVE-2026-41648
Incus has Unbounded YAML Metadata Decode via Parsing
MEDIUM 6.5
CVE-2026-40251
Incus Vulnerable to Panic via Snapshot Bounds Check
HIGH 8.7
CVE-2026-23954
Incus container image templating arbitrary host file read and write
Browse more Go advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes