GO-2025-3781
and 20 other vulnerabilities
GO-2025-3781 : Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus
GO-2025-3782 : Incus creates nftables rules that partially bypass security options in github.com/lxc/incus
GO-2025-4115 : Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus
GO-2026-4357 : Incus container image templating arbitrary host file read and write in github.com/lxc/incus
GO-2026-4359 : Incus container environment configuration newline injection in github.com/lxc/incus
GO-2026-4879 : Local Incus UI web server vulnerable to nuthentication bypass in github.com/lxc/incus
GO-2026-4881 : Incus vulnerable to arbitrary file read and write through pongo templates in github.com/lxc/incus
GO-2026-4882 : Incus does not verify combined fingerprint when downloading images from simplestreams servers in github.com/lxc/incus
GO-2026-4884 : Incus has an abitrary file write through its systemd-creds options in github.com/lxc/incus
GO-2026-4885 : Incus vulnerable to local privilege escalation through VM screenshot path in github.com/lxc/incus
GO-2026-4886 : Incus vulnerable to denial of source through crafted bucket backup file in github.com/lxc/incus
GO-2026-5127 : Incus Vulnerable to Panic via Snapshot Bounds Check in github.com/lxc/incus
GO-2026-5168 : Incus has Unbounded YAML Metadata Decode via Parsing in github.com/lxc/incus
GO-2026-5252 : Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) in github.com/lxc/incus
GO-2026-5254 : Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus
GO-2026-5280 : Incus is affected by unbounded binary import disk exhaustion in github.com/lxc/incus
GO-2026-5319 : Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots in github.com/lxc/incus
GO-2026-5384 : Incus has Nil-Pointer Dereference via S3 Bucket Import in github.com/lxc/incus
GO-2026-5397 : Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus
GO-2026-5612 : Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus
GO-2026-5742 : Incus has Nil Dereferences on Restore via Malformed YAML in github.com/lxc/incus
The highest tagged major version is
v7 .
Discover Packages
github.com/lxc/incus
internal
server
db
operationtype
package
Version:
v0.7.0
Opens a new window with list of versions in this module.
Published: Mar 26, 2024
License: Apache-2.0
Opens a new window with license information.
Imports: 1
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
Type is a numeric code indentifying the type of an Operation.
const (
Unknown Type = iota
ClusterBootstrap
ClusterJoin
BackupCreate
BackupRename
BackupRestore
BackupRemove
ConsoleShow
InstanceCreate
InstanceUpdate
InstanceRename
InstanceMigrate
InstanceLiveMigrate
InstanceFreeze
InstanceUnfreeze
InstanceDelete
InstanceStart
InstanceStop
InstanceRestart
InstanceRebuild
CommandExec
SnapshotCreate
SnapshotRename
SnapshotRestore
SnapshotTransfer
SnapshotUpdate
SnapshotDelete
ImageDownload
ImageDelete
ImageToken
ImageRefresh
VolumeCopy
VolumeCreate
VolumeMigrate
VolumeMove
VolumeSnapshotCreate
VolumeSnapshotDelete
VolumeSnapshotUpdate
ProjectRename
ImagesExpire
ImagesPruneLeftover
ImagesUpdate
ImagesSynchronize
LogsExpire
InstanceTypesUpdate
BackupsExpire
SnapshotsExpire
CustomVolumeSnapshotsExpire
CustomVolumeBackupCreate
CustomVolumeBackupRemove
CustomVolumeBackupRename
CustomVolumeBackupRestore
WarningsPruneResolved
ClusterJoinToken
VolumeSnapshotRename
ClusterMemberEvacuate
ClusterMemberRestore
CertificateAddToken
RemoveOrphanedOperations
RenewServerCertificate
RemoveExpiredTokens
ClusterHeal
BucketBackupCreate
BucketBackupRemove
BucketBackupRename
BucketBackupRestore
)
Possible values for Type
WARNING: The type codes are stored in the database, so this list of
definitions should be normally append-only. Any other change
requires a database update.
Description return a human-readable description of the operation type.
Permission returns the auth.ObjectType and auth.Entitlement required to cancel the operation.
¶
Click to show internal directories.
Click to hide internal directories.
Affected by 
The highest tagged major version is
Documentation
¶
Source Files