Debian/incus: medium 5.3
Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code respo
Action: Upgrade incus to 6.0.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.5-1 | - |
Fixed versions
| 6.0.5-1 |
Sources
- osv: DEBIAN-CVE-2025-54291#Debian:14/incus
- https://security-tracker.debian.org/tracker/CVE-2025-54291
published · modified · JSON