{"action":"Upgrade incus to 6.0.4-2+deb13u7 or later.","affected":[{"fixed":"6.0.4-2+deb13u7","introduced":"0"}],"component":"incus","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["6.0.4-2+deb13u7"],"id":"tcs_01M5NRZB2S11HPZ6J8RNAAPV51","modified_at":"2026-10-01T03:03:04.669981310Z","published_at":"2026-05-07T14:16:03.500Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-41685","https://security-tracker.debian.org/tracker/CVE-2026-41685"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-41685","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-41685"}],"summary":"Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk space, potentially taking d"}