{"action":"Upgrade glances to 4.5.6 or later.","affected":[{"fixed":"4.5.6","introduced":"4.5.2"}],"component":"glances","cve_ids":["CVE-2026-62982"],"ecosystem":"PyPI","epss":0.00197,"exploited":false,"fixed_versions":["4.5.6"],"ghsa_id":"GHSA-73wf-9vmv-5pv9","id":"tcs_01M5KH6N4SK8A6PS7J9JHQ3R0Q","modified_at":"2026-08-19T12:45:05.477492048Z","published_at":"2026-08-19T11:56:26.862162Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3666","https://github.com/nicolargo/glances/security/advisories/GHSA-73wf-9vmv-5pv9","https://github.com/nicolargo/glances/commit/ea4cf2f54f0d961e24aa0b24fff9584bab39db93","https://github.com/nicolargo/glances","https://github.com/nicolargo/glances/releases/tag/v4.5.6","https://pypi.org/project/glances","https://github.com/advisories/GHSA-73wf-9vmv-5pv9","https://nvd.nist.gov/vuln/detail/CVE-2026-62982"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-3666","url":"https://osv.dev/vulnerability/PYSEC-2026-3666"}],"summary":"Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection"}