Affected by GO-2025-4115 and 21 other vulnerabilities

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

GO-2026-4357: Incus container image templating arbitrary host file read and write in github.com/lxc/incus

GO-2026-4359: Incus container environment configuration newline injection in github.com/lxc/incus

GO-2026-5127: Incus Vulnerable to Panic via Snapshot Bounds Check in github.com/lxc/incus

GO-2026-5168: Incus has Unbounded YAML Metadata Decode via Parsing in github.com/lxc/incus

GO-2026-5252: Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) in github.com/lxc/incus

GO-2026-5254: Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus

GO-2026-5280: Incus is affected by unbounded binary import disk exhaustion in github.com/lxc/incus

GO-2026-5319: Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots in github.com/lxc/incus

GO-2026-5384: Incus has Nil-Pointer Dereference via S3 Bucket Import in github.com/lxc/incus

GO-2026-5397: Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus

GO-2026-5612: Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus

GO-2026-5742: Incus has Nil Dereferences on Restore via Malformed YAML in github.com/lxc/incus

GO-2026-5798: Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image in github.com/lxc/incus

GO-2026-5799: Incus has a restricted project bypass leading to arbitrary command execution in github.com/lxc/incus

GO-2026-5800: Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} in github.com/lxc/incus

GO-2026-5801: Incus has an arbitrary file write on host via `exec-output` symlink in crafted image in github.com/lxc/incus

GO-2026-5802: Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus

GO-2026-5803: Incus has arbitrary file read+write on host via templates/ symlink in malicious image in github.com/lxc/incus

GO-2026-5806: Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus

GO-2026-5808: Incus has an argument injection in backup compression algorithm leading to AFW and ACE in github.com/lxc/incus

GO-2026-5810: Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) in github.com/lxc/incus

The highest tagged major version is v7.

load

package

v6.23.0 Latest Latest Go to latest Published: Mar 27, 2026 License: Apache-2.0 Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/lxc/incus

Links

Open Source Insights

Documentation ¶

Index ¶

func AuthorizationCompile(name string, src string) (*starlark.Program, error)
func AuthorizationProgram() (*starlark.Program, *starlark.Thread, error)
func AuthorizationSet(src string) error
func AuthorizationValidate(src string) error
func InstancePlacementCompile(name string, src string) (*starlark.Program, error)
func InstancePlacementProgram() (*starlark.Program, *starlark.Thread, error)
func InstancePlacementSet(src string) error
func InstancePlacementValidate(src string) error
func QEMUCompile(name string, src string) (*starlark.Program, error)
func QEMUProgram(instance string) (*starlark.Program, *starlark.Thread, error)
func QEMUSet(src string, instance string) error
func QEMUValidate(src string) error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func AuthorizationCompile ¶ added in v6.0.3

func AuthorizationCompile(name string, src string) (*starlark.Program, error)

AuthorizationCompile compiles the authorization scriptlet.

func AuthorizationProgram ¶ added in v6.0.3

func AuthorizationProgram() (*starlark.Program, *starlark.Thread, error)

AuthorizationProgram returns the precompiled authorization scriptlet program.

func AuthorizationSet ¶ added in v6.0.3

func AuthorizationSet(src string) error

AuthorizationSet compiles the authorization scriptlet into memory for use with AuthorizationRun. If empty src is provided the current program is deleted.

func AuthorizationValidate ¶ added in v6.0.3

func AuthorizationValidate(src string) error

AuthorizationValidate validates the authorization scriptlet.

func InstancePlacementCompile ¶

func InstancePlacementCompile(name string, src string) (*starlark.Program, error)

InstancePlacementCompile compiles the instance placement scriptlet.

func InstancePlacementProgram ¶

func InstancePlacementProgram() (*starlark.Program, *starlark.Thread, error)

InstancePlacementProgram returns the precompiled instance placement scriptlet program.

func InstancePlacementSet ¶

func InstancePlacementSet(src string) error

InstancePlacementSet compiles the instance placement scriptlet into memory for use with InstancePlacementRun. If empty src is provided the current program is deleted.

func InstancePlacementValidate ¶

func InstancePlacementValidate(src string) error

InstancePlacementValidate validates the instance placement scriptlet.

func QEMUCompile ¶ added in v6.0.2

func QEMUCompile(name string, src string) (*starlark.Program, error)

QEMUCompile compiles the QEMU scriptlet.

func QEMUProgram ¶ added in v6.0.2

func QEMUProgram(instance string) (*starlark.Program, *starlark.Thread, error)

QEMUProgram returns the precompiled QEMU scriptlet program.

func QEMUSet ¶ added in v6.0.2

func QEMUSet(src string, instance string) error

QEMUSet compiles the QEMU scriptlet into memory for use with QEMURun. If empty src is provided the current program is deleted.

func QEMUValidate ¶ added in v6.0.2

func QEMUValidate(src string) error

QEMUValidate validates the QEMU scriptlet.

Types ¶

This section is empty.

Source Files ¶

View all Source files

load.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL