Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/26 7:07 p.m.23 views

Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)

Summary backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An authenticated user with cancreatestoragevolumes permission on any project ca...

7.1CVSS5.8AI score0.00385EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder