# Glances v4.5.4 — Glances 4.5.4

- Product: Glances (https://whatsnew.fyi/product/glances)
- Vendor: Nicolas Hennion
- Date: 2026-04-19
- Version: v4.5.4
- Original notes: https://github.com/nicolargo/glances/releases/tag/v4.5.4
- Permalink: https://whatsnew.fyi/product/glances/releases/v4.5.4
- Labels: Platforms: Desktop

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Cannot set warning/critical temperature for a specific sensor
- **fixed** — Memory percentage and used displayed as negative numbers
- **fixed** — Incorrect Docker container count via Homeassistant Integration
- **fixed** — Fix LXD filter excluding containers on standalone hosts
- **added** — Add Rockchip MPP plugin for hardware encoder/decoder monitoring
- **changed** — Clamp memory used/percent to non-negative values for LXC containers
- **changed** — Support single-core Rockchip NPU load parsing and improve device naming
- **security** — Correct SSRF in Glances IP Plugin via public_api that leads to credential leakage (CVE-2026-35587)
- **security** — Correct Cross-Origin Information Disclosure via Unauthenticated REST API /api/4 (CVE-2026-34839)
- **security** — Validate keyspace/table/replication_factor in Cassandra plugin to prevent CQL injection (CVE-2026-35588)

Bug corrected:

* Cannot set warning/critical temperature for a specific sensor #3525
* Memory percentage and used displayed as negative numbers #3358
* Incorrect Docker container count via Homeassistant Integration #3433
* Fix LXD filter excluding containers on standalone hosts #3529

Enhancements:

* Add Rockchip MPP plugin for hardware encoder/decoder monitoring #3514
* Clamp memory used/percent to non-negative values for LXC containers #3505
* Support single-core Rockchip NPU load parsing and improve device naming #3499

Security patches:

* SSRF in Glances IP Plugin via public_api leads to credential leakage - Correct CVE-2026-35587
* Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) - Correct CVE-2026-34839
* fix(cassandra): validate keyspace/table/replication_factor to prevent CQL injection - Correct CVE-2026-35588 #3520

Continious integration and documentation:

* pycache file is put in wheel #3516
* Remove dead code #3507

Thanks to all the contributors for this version: csvke, Christian Rishøj,
duriantaco, Julio César Suástegui, Paul and morimori-dev.