Read the docs

Glances Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Glances Project records in CISA KEV

No Glances Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Glances · all components

Priority MEDIUM 45

The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01653 Published 2021-07-29 Fixed in 3.2.1 CWE-611
Open these records in search →