CVE-2026-41684 is a vulnerability in Incus daemon versions up to 6.23.0 where a crafted backup archive containing a valid inline backup/index.yaml and a malformed legacy backup/container/backup.yaml lacking the container section can cause a nil pointer dereference and crash the daemon during instance restore. This occurs because the legacy backup.yaml is reparsed after extraction without proper validation, leading to unguarded dereferencing of a nil container object. The flaw requires an authenticated user with permission to import instance backups and results in a denial of service via daemon crash.
CVE-2026-41648 is a vulnerability in Incusd where user-supplied image and backup tarballs are unpacked and YAML metadata files are parsed without size restrictions. This can lead to excessive memory consumption during YAML decoding, potentially causing the server to run out of memory or degrade service performance. The issue arises because the tar header size is not checked before decoding, allowing large YAML documents to be loaded into memory. A patch is available in Incus version 7.0.0 that adds size checks and limits the reader to mitigate this risk.
CVE-2026-41647 is a vulnerability in the Incus daemon where missing error handling during S3 bucket import can cause a nil-pointer dereference and crash the daemon. This occurs when a truncated or corrupted tar archive is processed, leading to a panic due to dereferencing a nil header pointer. The issue affects versions up to 6.23.0 and has a medium severity rating with an impact on availability.
CVE-2026-40251 is a vulnerability in Incus prior to version 7.0.0 where improper bounds checking in the storage volume import logic can cause the Incus daemon to panic and crash. This occurs due to an incorrect length check when indexing snapshot metadata arrays during backup restore and migration operations. An authenticated user with access to the storage volume feature can exploit this by submitting a specially crafted backup archive that triggers out-of-bounds access, resulting in a denial of service by crashing the daemon.
A broken TLS validation logic in the OVN database connection within Incus allows an attacker who can intercept the OVN endpoint to impersonate the OVN database by presenting a rogue self-signed certificate. The vulnerability arises because the custom TLS verifier accepts peer-supplied root certificates instead of anchoring trust in the configured CA certificate, undermining the intended authentication model. This affects authenticated connections from Incus to OVN northbound and southbound databases, which are critical for logical network configuration and control-plane coordination. The flaw reduces CA-anchored authentication to endpoint impersonation by an attacker with network access, but exploitation is difficult due to typical deployment architectures. A fix is available in Incus version 7.0.0.
GoBGP version 4.3.0 and earlier contains an out-of-bounds read vulnerability in the ParseIP6Extended function. This flaw can be triggered by an attacker supplying a crafted BGP UPDATE message, leading to a Denial of Service (DoS) condition. The issue is fixed in version 4.4.0.
CVE-2026-40197 is a nil-pointer dereference vulnerability in the Incus daemon's custom volume import feature. An authenticated user with access to storage volume import can supply a crafted backup archive containing a null entry in the volume_snapshots array. This causes the daemon to crash during import, resulting in a denial of service. The flaw arises because the code assumes all snapshot entries are non-nil and dereferences them without validation. The issue affects Incus versions prior to 7.0.0 and is fixed in version 7.0.0.
CVE-2026-40195 is a nil-pointer dereference vulnerability in the Incus daemon's storage bucket import logic. An authenticated user with access to the storage bucket feature can cause the daemon to crash by importing a malformed backup archive missing the config block in its index.yaml file. This results in a denial of service by repeatedly crashing the daemon during bucket import operations. The issue is fixed in Incus version 7.0.0.
CVE-2026-35527 is a blind server-side request forgery (SSRF) vulnerability in Incus prior to version 7.0.0. It allows an authenticated user to cause the Incus daemon to send HEAD requests to arbitrary URLs during the image import preflight stage before validation and policy checks are completed. Although the actual image import is rejected by project restrictions, the premature HEAD request can be used to probe internal or external network endpoints, potentially revealing sensitive environment details.
Ollama versions prior to 0.17.1 have a critical heap out-of-bounds read vulnerability in the GGUF model loader. This flaw allows an attacker to supply a crafted GGUF file with tensor offsets and sizes exceeding the file length, causing the server to read memory beyond the allocated buffer. Sensitive data such as environment variables, API keys, system prompts, and other users' conversation data may be leaked. The vulnerability can be exploited by uploading the crafted model via the unauthenticated /api/create and /api/push endpoints. Although default deployments bind to localhost, many use a configuration exposing the service publicly, increasing risk. A fix is available in version 0.17.1.
GoBGP versions prior to 4.4.0 contain a vulnerability in the BMP Parser component that allows out-of-bounds memory reads. This flaw affects the BMPPeerUpNotification.ParseBody and BMPStatisticsReport.ParseBody functions. The issue can be exploited remotely and leads to a denial of service impact. Upgrading to version 4.4.0 resolves the vulnerability.
GoBGP versions prior to 4.4.0 contain an integer underflow vulnerability in the parseRibEntry function within pkg/packet/mrt/mrt.go. This flaw can be exploited remotely and may lead to impacts on confidentiality, integrity, and availability. The issue is fixed in version 4.4.0.
A vulnerability in GoBGP versions prior to 4.4.0 affects the SRv6 L3 Service component, specifically the SRv6L3ServiceAttribute.DecodeFromBytes function. This flaw allows remote attackers to cause a denial of service by improper resource shutdown or release. The issue is fixed in version 4.4.0.
A vulnerability in the Contrast CLI's Kata agent policies allowed arbitrary writes to the guest root filesystem via the CopyFile verification process. This flaw enabled a malicious host process with VSOCK access to issue CopyFile requests that could overwrite security-critical files or cause sensitive data disclosure, leading to full guest takeover. The issue is patched in Contrast version 1.19.1. Users unable to upgrade can apply a rego-based policy fix as a workaround.
A vulnerability in Gotenberg v8 prior to 8.31.0 allows injection of arbitrary ExifTool arguments via newline characters in metadata values. The flaw bypasses key sanitization by not validating metadata values, enabling attackers to inject pseudo-tags such as -FileName, -Directory, -SymLink, and -HardLink. This can lead to renaming, moving, overwriting files, and creating symlinks or hard links in the container filesystem, which runs as root by default. The issue is fixed in version 8.31.0.
Gotenberg versions 8.29.1 up to but not including 8.31.0 contain an unauthenticated server-side request forgery (SSRF) vulnerability via an unfiltered webhook URL. An attacker with network access can cause Gotenberg to make arbitrary HTTP POST requests to internal or external destinations by supplying a crafted URL in the Gotenberg-Webhook-Url header. This blind SSRF allows internal network probing and forced POST requests to internal services, including cloud metadata endpoints, without exposing response bodies. The root cause is an insecure default in URL filtering that allows all URLs when no allowlist or denylist is configured. A fix is available in version 8.31.0.
Gotenberg v8 versions prior to 8.31.0 contain a Server-Side Request Forgery (SSRF) vulnerability due to case-sensitive URL scheme filtering in webhook and downloadFrom deny-lists. The deny-lists use a regex that only blocks lowercase 'http://' or 'https://' schemes, allowing uppercase variants like 'HTTP://' to bypass restrictions. This bypass enables unauthenticated attackers to access internal network services that should be blocked, potentially exposing sensitive internal resources such as cloud instance metadata services. The vulnerability is fixed in version 8.31.0 by normalizing URL schemes to lowercase or using case-insensitive regex matching.
A remote Denial of Service (DoS) vulnerability exists in GoBGP versions prior to 4.3.0. It is triggered by a malformed BGP UPDATE message containing improperly ordered AS4_PATH and AS_PATH attributes, causing a runtime panic due to an out-of-bounds slice access. This crash leads to the GoBGP process terminating, resulting in loss of routing capabilities.
A remote Denial of Service (DoS) vulnerability exists in GoBGP versions 4.3.0 up to but not including 4.4.0. The flaw is caused by a nil pointer dereference when the daemon processes a malformed BGP UPDATE message containing an unrecognized Path Attribute marked as "Well-known." This leads to a panic and crash of the GoBGP daemon, disrupting BGP session handling.
Elastic Package Registry versions prior to 1.38.0 contain an improper verification of cryptographic signatures vulnerability (CWE-347). This flaw could allow an attacker who can intercept network traffic or influence the contents served by a self-hosted registry to substitute a tampered package without triggering a failed integrity check. The vulnerability has a medium severity with a CVSS score of 5.9. A fix is available in version 1.38.0.