CVE-2026-32634

A flaw was found in glances. In Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead of the discovered IP. When a dynamic server reports itself a...

croparray (>=0.1.0 <=0.1.1) potentially affected by CVE-2026-32634 via glances (=3.2.7)

glances PYPI version =3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on glances and may be impacted: - croparray =0.1.0, =0.1.1 Source cves: CVE-2026-32634 Source advisory: OSV:GHSA-VX5F-957P-QPVM...

CVE-2026-32634

creationtimestamp| type| source ---|---|--- 2026-03-14 14:52:49+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-vx5f-957p-qpvm 2026-03-18 18:40:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhe56nei7t2v 2026-03-19...