{"action":"Upgrade glances to 4.5.1 or later.","affected":[{"fixed":"4.5.1","introduced":"0"}],"component":"glances","cve_ids":["CVE-2026-30928"],"ecosystem":"PyPI","epss":0.01693,"exploited":false,"fixed_versions":["4.5.1"],"ghsa_id":"GHSA-gh4x-f7cq-wwx6","id":"tcs_01M5KGXV4S4GZF2Z8E8KX67M6Z","modified_at":"2026-07-13T07:15:30.442950665Z","published_at":"2026-03-10T18:18:52.627Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2164","https://github.com/nicolargo/glances/releases/tag/v4.5.1","https://github.com/nicolargo/glances/commit/306a7136154ba5c1531489c99f8306d84eae37da","https://github.com/nicolargo/glances/security/advisories/GHSA-gh4x-f7cq-wwx6"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-2164","url":"https://osv.dev/vulnerability/PYSEC-2026-2164"}],"summary":"Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST API endpoint returns the entire parsed Glances configuration file (glances.conf) via self.config"}