v4.5.4Desktop
Glances 4.5.4
Added 1
- Add Rockchip MPP plugin for hardware encoder/decoder monitoring
Changed 2
- Clamp memory used/percent to non-negative values for LXC containers
- Support single-core Rockchip NPU load parsing and improve device naming
Fixed 4
- Cannot set warning/critical temperature for a specific sensor
- Memory percentage and used displayed as negative numbers
- Incorrect Docker container count via Homeassistant Integration
- Fix LXD filter excluding containers on standalone hosts
Security 3
- Correct SSRF in Glances IP Plugin via public_api that leads to credential leakage (CVE-2026-35587)
- Correct Cross-Origin Information Disclosure via Unauthenticated REST API /api/4 (CVE-2026-34839)
- Validate keyspace/table/replication_factor in Cassandra plugin to prevent CQL injection (CVE-2026-35588)
Bug corrected:
- Cannot set warning/critical temperature for a specific sensor #3525
- Memory percentage and used displayed as negative numbers #3358
- Incorrect Docker container count via Homeassistant Integration #3433
- Fix LXD filter excluding containers on standalone hosts #3529
Enhancements:
- Add Rockchip MPP plugin for hardware encoder/decoder monitoring #3514
- Clamp memory used/percent to non-negative values for LXC containers #3505
- Support single-core Rockchip NPU load parsing and improve device naming #3499
Security patches:
- SSRF in Glances IP Plugin via public_api leads to credential leakage - Correct CVE-2026-35587
- Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) - Correct CVE-2026-34839
- fix(cassandra): validate keyspace/table/replication_factor to prevent CQL injection - Correct CVE-2026-35588 #3520
Continious integration and documentation:
- pycache file is put in wheel #3516
- Remove dead code #3507
Thanks to all the contributors for this version: csvke, Christian Rishøj, duriantaco, Julio César Suástegui, Paul and morimori-dev.