PyPI/glances CVE-2026-68520: medium 5.3, EPSS 0.40%

Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config

Action: Upgrade glances to 4.5.6 or later.

pip install glances==4.5.6

Affected

Fixed versions

Sources

• osv: GHSA-4h34-v6r8-mmjc
• https://github.com/nicolargo/glances/security/advisories/GHSA-4h34-v6r8-mmjc
• https://github.com/nicolargo/glances/commit/8d0f8276c2abd2e9d400bd6c84bdfba0dfcab065
• https://github.com/nicolargo/glances
• https://github.com/nicolargo/glances/releases/tag/v4.5.6

CVE-2026-68520 · published 2026-08-17T17:20:48Z · modified 2026-08-19T12:55:45.103382579Z · JSON