{
  "cveId": "CVE-2021-23418",
  "url": "https://patchblox.com/security/cve/CVE-2021-23418",
  "summary": "CVE-2021-23418 is fixed in glances on 1 platform, first by glances 2.11.1-3ubuntu0.1~esm1, released July 29, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "glances: The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse...",
  "description": "The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.",
  "published": "2021-07-29T11:15:00Z",
  "severity": "Medium",
  "epss": 0.01653,
  "epssPercentile": 0.76712,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "glances",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.11.1-3ubuntu0.1~esm1",
      "fix": "glances 2.11.1-3ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-glances-2.11.1-3ubuntu0.1-esm1",
      "released": "2021-07-29T11:15:00Z"
    },
    {
      "platform": "linux",
      "product": "glances",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.1.3-1ubuntu0.1~esm1",
      "fix": "glances 3.1.3-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-glances-3.1.3-1ubuntu0.1-esm1",
      "released": "2021-07-29T11:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}