Fluid Attacks Database

Description

Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
go	github.com/lxc/incus/v6/cmd/incusd	>=0 <7.0.0	7.0.0
go	github.com/lxc/incus/v6	-	-
debian 14	incus	=6.0.4-2 \|\| =6.0.4-3 \|\| =6.0.5-1 \|\| =6.0.5-2 \|\| =6.0.5-3 \|\| =6.0.5-4 \|\| =6.0.5-5 \|\| =6.0.5-6 \|\| =6.0.5-7 \|\| =6.0.5-8 \|\| =6.0.6-1 \|\| =6.0.6-2 \|\| =6.0.6-3 \|\| =6.14.0-1~exp1 \|\| =6.15.0-1~exp1 \|\| =6.16.0-1~exp1 \|\| =6.17.0-1~exp1 \|\| =6.20.0-1~exp1 \|\| =6.21.0-1~exp1 \|\| =6.22.0-1~exp1 \|\| =6.23.0-1~exp1 \|\| =7.0.0-1~bpo13+1 \|\| >=0 <7.0.0-1	7.0.0-1
go	github.com/lxc/incus	-	-
go	github.com/lxc/incus/v7	>=0 <7.0.0	7.0.0
alpine v3.24	incus	>=0 <7.0.0-r0	7.0.0-r0

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.