{"action":"Upgrade glances to 4.5.6 or later.","affected":[{"fixed":"4.5.6","introduced":"4.5.2"}],"component":"glances","cve_ids":["CVE-2026-62982"],"ecosystem":"PyPI","epss":0.00197,"exploited":false,"fixed_versions":["4.5.6"],"ghsa_id":"GHSA-73wf-9vmv-5pv9","id":"tcs_01M5KF4PZFA8VRF5E87JXG1AJD","modified_at":"2026-08-19T12:55:55.814415461Z","published_at":"2026-08-17T17:20:24Z","references":["https://osv.dev/vulnerability/GHSA-73wf-9vmv-5pv9","https://github.com/nicolargo/glances/security/advisories/GHSA-73wf-9vmv-5pv9","https://github.com/nicolargo/glances/commit/ea4cf2f54f0d961e24aa0b24fff9584bab39db93","https://github.com/nicolargo/glances","https://github.com/nicolargo/glances/releases/tag/v4.5.6"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-73wf-9vmv-5pv9","url":"https://osv.dev/vulnerability/GHSA-73wf-9vmv-5pv9"}],"summary":"Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection"}