https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T05:11:38.997874+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-23418 CVE-2021-23418 — XML External Entity (XXE) Injection 2026-10-03T05:11:39.280086+00:00

Affected: Glances

The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.

 https://vulnerability.circl.lu/vuln/usn-5187-1 USN-5187-1 — glances vulnerability 2026-10-03T05:11:39.280190+00:00

Affected: Ubuntu:Pro:16.04:LTS: glances, Ubuntu:Pro:18.04:LTS: glances, Ubuntu:Pro:20.04:LTS: glances

It was discovered that Glances incorrectly parsed untrusted XML data due to usage of xmlrpclib. An attacker could possibly use this to perform an External Entity (XXE) Injection and cause the host system to crash.