GO-2026-5368

Source
https://pkg.go.dev/vuln/GO-2026-5368
Import Source
https://vuln.go.dev/ID/GO-2026-5368.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2026-5368
Aliases
Published
2026-08-11T23:21:27Z
Modified
2026-08-11T23:45:11Z
Summary
VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf in github.com/canonical/lxd
Details

VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf in github.com/canonical/lxd

Database specific
{
    "review_status": "REVIEWED",
    "url": "https://pkg.go.dev/vuln/GO-2026-5368"
}
References

Affected packages

Go / github.com/canonical/lxd

Package

Name
github.com/canonical/lxd
View open source insights on deps.dev
Purl
pkg:golang/github.com/canonical/lxd

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0-20210305023314-538ac3df036e

Ecosystem specific

{
    "imports": [
        {
            "path": "github.com/canonical/lxd/lxd/project/limits",
            "symbols": [
                "CheckLimits"
            ]
        }
    ]
}

Database specific

source
"https://vuln.go.dev/ID/GO-2026-5368.json"