glances

conf

REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

2026-07-04 17:26:38 +02:00

conftest.py

Improve unit test error for WebUI

2026-08-07 10:54:14 +02:00

HOW_TO_TEST_MCP.md

Correct issue on TU and upgrade lib dep

2026-08-01 10:53:33 +02:00

test_actions_sanitize.py

Argument Injection in On-Alert Action Commands via Unescaped Quote Characters in secure.py's Command Tokenizer - GHSA-56xw-p9qm-r437

2026-09-05 10:02:01 +02:00

test_amp_secure_popen.py

Arbitrary file write and command execution via redirection and chaining operators in AMP command configuration - GHSA-3vwc-qwhc-3mj7 - CVE-id-tbd

2026-06-06 08:24:14 +02:00

test_api_secure.py

as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config - Correct CVE-2026-68520

2026-08-01 10:19:50 +02:00

test_api.py

chore: improve glances maintenance path

2026-06-06 06:46:24 +00:00

test_browser_restful.py

…

test_browser_tui.py

…

test_clickhouse_sanitize.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_connections_states.py

Remember that a connections probe was disabled

2026-09-12 11:36:06 +07:00

test_core.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_cpu_percent.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_duckdb_sanitize.py

…

test_export_clickhouse.sh

…

test_export_csv.sh

…

test_export_duckdb.sh

…

test_export_influxdb_v1.sh

…

test_export_influxdb_v3.sh

…

test_export_json.sh

…

test_export_nats.sh

…

test_export_prometheus.sh

…

test_export_timescaledb_list.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_export_timescaledb.sh

…

test_folder_list_refresh.py

fix(folders): honour folder_N_refresh instead of walking every cycle

2026-08-24 17:45:05 +07:00

test_glances_curses.py

Let --disable-separator and --disable-bg override glances.conf

2026-09-11 12:14:21 +07:00

test_glances_stats.py

…

test_globals.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_hide_zero_row_visibility.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_hide_zero_threshold.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_json_serializer.py

…

test_lazy_views.py

Keep the deferral inside processlist instead of the base class

2026-08-07 16:06:39 +03:00

test_main.py

test(fs): cover free-space config in web mode

2026-08-16 23:10:45 +08:00

test_mcp.py

…

test_memoryleak.py

…

test_network_hide_threshold.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_outdated.py

test(outdated): json round-trip and graceful migration from legacy pickle cache

2026-05-23 11:52:53 +02:00

test_perf.py

…

test_plugin_containers_views.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_containers.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_cpu.py

…

test_plugin_diskio.py

fix(diskio): alert on the bitrate, and decorate the field the WebUI reads

2026-08-25 19:18:18 +07:00

test_plugin_docker.py

Add unit test to containers/docker plugin

2026-05-31 17:34:25 +02:00

test_plugin_fs.py

fix: compare stats to the init value, not to the bound method

2026-08-15 11:09:13 +00:00

test_plugin_gpu.py

VideoCore (v3d) memory shows ~93% on Raspberry Pi 5 with gpu_mem=4M — misleading denominator from drm-total-memory #3611

2026-07-14 09:59:20 +02:00

test_plugin_init_value.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_load.py

…

test_plugin_lxd.py

…

test_plugin_mem.py

…

test_plugin_memswap.py

…

test_plugin_model.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_network.py

fix(network): a rate of 0 in one direction must not mute the other

2026-08-27 10:31:01 +07:00

test_plugin_npu.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_percpu.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_ports.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_processcount.py

Fix: guard cursor navigation in client/server mode (see #3221 )

2026-08-04 21:13:20 -04:00

test_plugin_quicklook.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_sensors.py

fix(sensors): alert on a reading of 0 instead of skipping it

2026-08-26 14:42:35 +07:00

test_plugin_smart.py

TypeError: string indices must be integers, not 'str' in smart plugin during _add_device_stats #3704

2026-09-05 10:46:03 +02:00

test_plugin_virsh_injection.py

Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py - CVE-2026-46606

2026-05-23 12:27:19 +02:00

test_plugin_wifi.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_processes_cache.py

perf: make remove_non_running_procs O(n) instead of O(n^2)

2026-08-05 13:37:30 +03:00

test_program_aggregation.py

Invalidate on sort instead of changing sort_stats

2026-08-07 16:35:36 +03:00

test_program_io_counters.py

style: move the long explanations out of docstrings and into comments

2026-08-26 19:15:40 +07:00

test_programs_aggregation.py

fix: keep zero-valued fields when aggregating processes into programs

2026-08-05 16:44:15 +03:00

test_rate_on_list.py

fix(rate): initialise a stat that is new since the previous sample

2026-09-07 15:13:36 +07:00

test_restful.py

REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

2026-07-04 17:26:38 +02:00

test_sort_missing_values.py

fix(sort): read a missing sort value as zero instead of discarding the sort

2026-08-26 23:38:44 +07:00

test_stdout_csv.py

Lint the code

2026-07-18 09:29:06 +02:00

test_vms_decorations.py

style(vms): wrap two test lines over the 120-column ruff limit

2026-09-08 14:36:17 +07:00

test_web_list_ssl_verify.py

Read web_x_ssl_verify as a boolean, not as a CA bundle path

2026-09-12 11:31:29 +07:00

test_webui_template_response.py

…

test_webui.py

…

test_xmlrpc.py

XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard - CVE-2026-46608

2026-05-23 11:40:20 +02:00