Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-54292
4.6
MEDIUMCVSS v3
Severity scale
010
Description
Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted resource names embedded in URL paths.
canonical/lxd
GitHubPowerful system container and virtual machine manager
GitHubPowerful system container and virtual machine manager>= 5.0.0, < 5.21.4, >= 6.0, < 6.5NVD