Canonical
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 4, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Instance template path traversal allows arbitrary host file write as root
Path Traversal Vulnerability in apport-unpack
Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE
Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
Root RCE via image backup.yaml symlink
Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
Project restriction bypass via instance migration config override
Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
Storage volume cross-project move and snapshot restore bypass project disk limits
Cross-project cluster migration bypasses project restrictions via cluster notification flag
Monitor Canonical in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.