Start for Free
go

github.com/lxc/incus/v7/cmd/incusd

View on go registry
10 Total advisories
10 Vulnerabilities
0 Malware

Dependency scanning

Check whether github.com/lxc/incus/v7/cmd/incusd is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

CRITICAL 9.9
Go

CVE-2026-48750

Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
CRITICAL 9.9
Go

CVE-2026-48751

Incus has a restricted project bypass leading to arbitrary command execution
HIGH 7.7
Go

CVE-2026-55622

Incus has a project restriction bypass in instance copy across projects
CRITICAL 9.9
Go

CVE-2026-48752

Incus has arbitrary file read+write on host via templates/ symlink in malicious image
CRITICAL 9.9
Go

CVE-2026-48749

Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
CRITICAL 9.9
Go

CVE-2026-48755

Incus has an argument injection in backup compression algorithm leading to AFW and ACE
CRITICAL 9.9
Go

CVE-2026-48769

Incus has an arbitrary file write on its client due to trusted image hash
CRITICAL 9.9
Go

CVE-2026-48753

Incus has an arbitrary file write via path traversal in S3 multipart upload
UNKNOWN
Go

CVE-2026-48754

Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}
UNKNOWN
Go

CVE-2026-48756

Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)

Browse more Go advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes