nova (PyPI)
Advisories
137
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2015.1.2 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "nova>=2015.1.2"poetry
poetry add "nova>=2015.1.2"uv
uv add "nova>=2015.1.2"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-mfg3-p6m3-gjgr OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints |
High EPSS 0.27% |
>= 18.0.0, <= 31.3.0 | No fix yet |
| GHSA-mfg3-p6m3-gjgr OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints |
High EPSS 0.27% |
>= 32.0.0, < 32.2.1 | 32.2.1 |
| GHSA-mfg3-p6m3-gjgr OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints |
High EPSS 0.27% |
>= 33.0.0, < 33.0.2 | 33.0.2 |
| GHSA-mfg3-p6m3-gjgr OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints |
High EPSS 0.27% |
>= 18.0.0, < 31.3.1>= 32.0.0, < 32.2.1>= 33.0.0, < 33.0.2 | 31.3.132.2.133.0.2 |
| GHSA-m4f3-qp2w-gwh6 OpenStack Nova calls qemu-img without format restrictions for resize |
High EPSS 0.42% |
>= 31.0.0.0rc1, <= 31.2.0 | No fix yet |
| GHSA-m4f3-qp2w-gwh6 OpenStack Nova calls qemu-img without format restrictions for resize |
High EPSS 0.42% |
<= 30.2.1>= 31.0.0.0rc1, <= 31.2.0>= 32.0.0.0rc1, <= 32.1.0 | No fix yet |
| GHSA-m4f3-qp2w-gwh6 OpenStack Nova calls qemu-img without format restrictions for resize |
High EPSS 0.42% |
<= 30.2.1 | No fix yet |
| GHSA-m4f3-qp2w-gwh6 OpenStack Nova calls qemu-img without format restrictions for resize |
High EPSS 0.42% |
>= 32.0.0.0rc1, <= 32.1.0 | No fix yet |
| GHSA-rm86-h44c-2r2m OpenStack Nova vulnerable to unauthorized access to potentially sensitive data |
Medium EPSS 0.95% |
<= 27.4.0>= 28.0.0, <= 28.2.0>= 29.0.0, <= 29.1.0 | No fix yet |
| GHSA-rm86-h44c-2r2m OpenStack Nova vulnerable to unauthorized access to potentially sensitive data |
Medium EPSS 0.95% |
>= 29.0.0, <= 29.1.0 | No fix yet |
| GHSA-rm86-h44c-2r2m OpenStack Nova vulnerable to unauthorized access to potentially sensitive data |
Medium EPSS 0.95% |
>= 28.0.0, <= 28.2.0 | No fix yet |
| GHSA-rm86-h44c-2r2m OpenStack Nova vulnerable to unauthorized access to potentially sensitive data |
Medium EPSS 0.95% |
<= 27.4.0 | No fix yet |
| GHSA-r4v4-w9pv-6fph OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access |
Medium EPSS 0.83% |
<= 29.0.2 | No fix yet |
| GHSA-r4v4-w9pv-6fph OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access |
Medium EPSS 0.83% |
<= 29.0.2 | No fix yet |
| GHSA-7h75-hwxx-qpgc OpenStack Cinder, glance, and Nova vulnerable to Path Traversal |
Medium EPSS 1.03% |
< 24.1.2>= 25.0.0, < 25.0.2 | 24.1.225.0.2 |
| GHSA-7h75-hwxx-qpgc OpenStack Cinder, glance, and Nova vulnerable to Path Traversal |
Medium EPSS 1.03% |
< 24.1.2 | 24.1.2 |
| GHSA-7h75-hwxx-qpgc OpenStack Cinder, glance, and Nova vulnerable to Path Traversal |
Medium EPSS 1.03% |
>= 25.0.0, < 25.0.2 | 25.0.2 |
| GHSA-v725-c588-h936 OpenStack Nova Changing vnic_type breaks compute service restart |
Low EPSS 0.31% |
< 23.2.2 | 23.2.2 |
| GHSA-v725-c588-h936 OpenStack Nova Changing vnic_type breaks compute service restart |
Low EPSS 0.31% |
>= 24.0.0, < 24.1.2 | 24.1.2 |
| GHSA-v725-c588-h936 OpenStack Nova Changing vnic_type breaks compute service restart |
Low EPSS 0.31% |
>= 25.0.0, < 25.0.2 | 25.0.2 |
| GHSA-v725-c588-h936 OpenStack Nova Changing vnic_type breaks compute service restart |
Low EPSS 0.31% |
< 23.2.2>= 24.0.0, < 24.1.2>= 25.0.0, < 25.0.2 | 23.2.224.1.225.0.2 |
| GHSA-22jm-4hxw-35jf OpenStack Nova can leak consoleauth token into log files |
Low EPSS 0.41% |
>= 20.0.0, < 20.1.0 | 20.1.0 |
| GHSA-22jm-4hxw-35jf OpenStack Nova can leak consoleauth token into log files |
Low EPSS 0.41% |
>= 19.0.0, < 19.1.0 | 19.1.0 |
| GHSA-22jm-4hxw-35jf OpenStack Nova can leak consoleauth token into log files |
Low EPSS 0.41% |
< 18.2.4 | 18.2.4 |
| GHSA-22jm-4hxw-35jf OpenStack Nova can leak consoleauth token into log files |
Low EPSS 0.41% |
< 18.2.4>= 19.0.0, < 19.1.0>= 20.0.0, < 20.1.0 | 18.2.419.1.020.1.0 |
| GHSA-43cm-73px-5v4m OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors |
Low EPSS 1.51% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-43cm-73px-5v4m OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors |
Low EPSS 1.51% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-j6xh-q826-55jw OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack |
Medium EPSS 2.73% |
< 2013.2 | 2013.2 |
| GHSA-j6xh-q826-55jw OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack |
Medium EPSS 2.73% |
< 2013.2 | 2013.2 |
| GHSA-27q4-38qf-m25h OpenStack Compute Nova Improper Access Control |
Medium EPSS 1.82% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-27q4-38qf-m25h OpenStack Compute Nova Improper Access Control |
Medium EPSS 1.82% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-m674-hmx2-ffhq OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image |
Medium EPSS 0.39% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-m674-hmx2-ffhq OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image |
Medium EPSS 0.39% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-22w9-j288-8p9w OpenStack Nova Router metadata queries are not restricted by tenant |
Medium EPSS 1.85% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-22w9-j288-8p9w OpenStack Nova Router metadata queries are not restricted by tenant |
Medium EPSS 1.85% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-5644-2v3h-5w4x OpenStack Nova denial of service through compressed disk images |
Low EPSS 0.37% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-5644-2v3h-5w4x OpenStack Nova denial of service through compressed disk images |
Low EPSS 0.37% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-2w87-5qcj-j6gx OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image |
Low EPSS 0.44% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-p258-xmh3-72pv OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests |
Medium EPSS 1.65% |
>= 2013.1.0, < 2013.2.4 | 2013.2.4 |
| GHSA-p258-xmh3-72pv OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests |
Medium EPSS 1.65% |
>= 2013.1.0, < 2013.2.4 | 2013.2.4 |
| GHSA-2w87-5qcj-j6gx OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image |
Low EPSS 0.44% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-g2j5-7vgx-6xrx OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption |
High EPSS 3.09% |
< 12.0.4 | 12.0.4 |
| GHSA-g2j5-7vgx-6xrx OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption |
High EPSS 3.09% |
< 12.0.4 | 12.0.4 |
| GHSA-f4g4-cj8f-3cr9 OpenStack Nova logs sensitive context from notification exceptions |
Critical EPSS 2.30% |
>= 13.0.0, < 13.1.4 | 13.1.4 |
| GHSA-f4g4-cj8f-3cr9 OpenStack Nova logs sensitive context from notification exceptions |
Critical EPSS 2.30% |
>= 13.0.0, < 13.1.4>= 14.0.0, < 14.0.5>= 15.0.1, < 15.0.2 | 13.1.414.0.515.0.2 |
| GHSA-f4g4-cj8f-3cr9 OpenStack Nova logs sensitive context from notification exceptions |
Critical EPSS 2.30% |
>= 15.0.1, < 15.0.2 | 15.0.2 |
| GHSA-f4g4-cj8f-3cr9 OpenStack Nova logs sensitive context from notification exceptions |
Critical EPSS 2.30% |
>= 14.0.0, < 14.0.5 | 14.0.5 |
| GHSA-pjvw-p2v5-wf6q OpenStack Nova Long server names grow nova-api log files significantly |
Medium EPSS 2.09% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-pjvw-p2v5-wf6q OpenStack Nova Long server names grow nova-api log files significantly |
Medium EPSS 2.09% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-ph2h-hh49-vh27 OpenStack Nova Denial of Service in network source security groups |
Medium EPSS 2.10% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-ph2h-hh49-vh27 OpenStack Nova Denial of Service in network source security groups |
Medium EPSS 2.10% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-xjmj-p278-4jp5 OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
Medium EPSS 1.95% |
>= 2014.0.0, < 2014.1.2 | 2014.1.2 |
| GHSA-xjmj-p278-4jp5 OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
Medium EPSS 1.95% |
< 2013.2.4>= 2014.0.0, < 2014.1.2 | 2013.2.42014.1.2 |
| GHSA-qr62-r9xc-r2gj OpenStack Nova Multiple directory traversal vulnerabilities |
Medium EPSS 1.76% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-qr62-r9xc-r2gj OpenStack Nova Multiple directory traversal vulnerabilities |
Medium EPSS 1.76% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-xjmj-p278-4jp5 OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
Medium EPSS 1.95% |
< 2013.2.4 | 2013.2.4 |
| GHSA-5mj6-643f-2g85 OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information |
Medium EPSS 1.84% |
< 2013.1.3 | 2013.1.3 |
| GHSA-5mj6-643f-2g85 OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information |
Medium EPSS 1.84% |
< 2013.1.3 | 2013.1.3 |
| GHSA-mfmj-gwg3-vhw7 OpenStack Compute (nova) allows remote authenticated users to cause a denial of service |
Medium EPSS 3.38% |
< 2014.2.4>= 2015.1.0, < 2015.1.2 | 2014.2.42015.1.2 |
| GHSA-92hc-c226-32q7 OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service |
Medium EPSS 1.73% |
< 2014.1.3 | 2014.1.3 |
| GHSA-92hc-c226-32q7 OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service |
Medium EPSS 1.73% |
< 2014.1.3 | 2014.1.3 |
| GHSA-67rh-9p29-vrxr OpenStack Compute (Nova) allows remote attackers to bypass intended restriction |
Medium EPSS 3.70% |
< 2014.2.4>= 2015.1.0, < 2015.1.2 | 2014.2.42015.1.2 |
| GHSA-67rh-9p29-vrxr OpenStack Compute (Nova) allows remote attackers to bypass intended restriction |
Medium EPSS 3.70% |
>= 2015.1.0, < 2015.1.2 | 2015.1.2 |
| GHSA-67rh-9p29-vrxr OpenStack Compute (Nova) allows remote attackers to bypass intended restriction |
Medium EPSS 3.70% |
< 2014.2.4 | 2014.2.4 |
| GHSA-c36r-g737-9qp8 OpenStack Nova Potential Xen connection password leak via StorageError |
Medium EPSS 2.24% |
>= 12.0.0, < 12.0.1 | 12.0.1 |
| GHSA-c36r-g737-9qp8 OpenStack Nova Potential Xen connection password leak via StorageError |
Medium EPSS 2.24% |
>= 12.0.0, < 12.0.1 | 12.0.1 |
| GHSA-3vx7-xff6-h2vx OpenStack Nova instance migration process does not stop when instance is deleted |
Medium EPSS 3.48% |
< 12.0.0.0b3 | 12.0.0.0b3 |
| GHSA-grp5-h379-j75x OpenStack Nova live snapshots use an insecure local directory |
Low EPSS 0.48% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-grp5-h379-j75x OpenStack Nova live snapshots use an insecure local directory |
Low EPSS 0.48% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-3vx7-xff6-h2vx OpenStack Nova instance migration process does not stop when instance is deleted |
Medium EPSS 3.48% |
< 112.0.0.0b3 | 112.0.0.0b3 |
| GHSA-hrv9-4x4c-9jc8 OpenStack Nova DoS through ephemeral disk backing files |
Medium EPSS 2.04% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-hrv9-4x4c-9jc8 OpenStack Nova DoS through ephemeral disk backing files |
Medium EPSS 2.04% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-43hc-pwvx-pmfg OpenStack Compute (Nova) Denial of Service vulnerability |
Medium EPSS 2.81% |
< 2014.1.4>= 2014.2.0, < 2014.2.1 | 2014.1.42014.2.1 |
| GHSA-43hc-pwvx-pmfg OpenStack Compute (Nova) Denial of Service vulnerability |
Medium EPSS 2.81% |
>= 2014.2.0, < 2014.2.1 | 2014.2.1 |
| GHSA-x8xr-rm9r-7mvf OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity |
Medium EPSS 1.07% |
< 2014.1.4>= 2014.2.0, < 2014.2.3 | 2014.1.42014.2.3 |
| GHSA-x8xr-rm9r-7mvf OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity |
Medium EPSS 1.07% |
>= 2014.2.0, < 2014.2.3 | 2014.2.3 |
| GHSA-x8xr-rm9r-7mvf OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity |
Medium EPSS 1.07% |
< 2014.1.4 | 2014.1.4 |
| GHSA-43hc-pwvx-pmfg OpenStack Compute (Nova) Denial of Service vulnerability |
Medium EPSS 2.81% |
< 2014.1.4 | 2014.1.4 |
| GHSA-mfmj-gwg3-vhw7 OpenStack Compute (nova) allows remote authenticated users to cause a denial of service |
Medium EPSS 3.38% |
< 2014.2.4 | 2014.2.4 |
| GHSA-mfmj-gwg3-vhw7 OpenStack Compute (nova) allows remote authenticated users to cause a denial of service |
Medium EPSS 3.38% |
>= 2015.1.0, < 2015.1.2 | 2015.1.2 |
| GHSA-49jv-37hm-6gfp OpenStack Nova host data access through resize/migration |
Medium EPSS 2.11% |
>= 12.0.0, < 12.0.3 | 12.0.3 |
| GHSA-49jv-37hm-6gfp OpenStack Nova host data access through resize/migration |
Medium EPSS 2.11% |
>= 12.0.0, < 12.0.3 | 12.0.3 |
| GHSA-g63p-mfcm-54c4 OpenStack Nova VMware instance leak potentially leading to compute DoS |
Medium EPSS 2.02% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-g63p-mfcm-54c4 OpenStack Nova VMware instance leak potentially leading to compute DoS |
Medium EPSS 2.02% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-ffmh-r67w-m88f OpenStack Nova Denial of service attack on the compute host |
High EPSS 3.72% |
>= 15.0.0, < 15.1.1 | 15.1.1 |
| GHSA-ffmh-r67w-m88f OpenStack Nova Denial of service attack on the compute host |
High EPSS 3.72% |
>= 15.0.0, < 15.1.1>= 16.0.0, < 16.1.2 | 15.1.116.1.2 |
| GHSA-ffmh-r67w-m88f OpenStack Nova Denial of service attack on the compute host |
High EPSS 3.72% |
>= 16.0.0, < 16.1.2 | 16.1.2 |
| GHSA-vq76-rxx3-4r4r OpenStack Nova DoS by rebuilding the same instance with a new image multiple times |
High EPSS 1.99% |
< 16.0.4 | 16.0.4 |
| GHSA-vq76-rxx3-4r4r OpenStack Nova DoS by rebuilding the same instance with a new image multiple times |
High EPSS 1.99% |
< 16.0.4 | 16.0.4 |
| GHSA-w2wf-cgwh-vpqg OpenStack Nova Filter Scheduler Bypass |
Medium EPSS 1.42% |
>= 16.0.0, < 16.0.3 | 16.0.3 |
| GHSA-w2wf-cgwh-vpqg OpenStack Nova Filter Scheduler Bypass |
Medium EPSS 1.42% |
>= 15.0.0, < 15.0.8 | 15.0.8 |
| GHSA-w2wf-cgwh-vpqg OpenStack Nova Filter Scheduler Bypass |
Medium EPSS 1.42% |
>= 14.0.0, < 14.0.10 | 14.0.10 |
| GHSA-w2wf-cgwh-vpqg OpenStack Nova Filter Scheduler Bypass |
Medium EPSS 1.42% |
>= 14.0.0, < 14.0.10>= 15.0.0, < 15.0.8>= 16.0.0, < 16.0.3 | 14.0.1015.0.816.0.3 |
| GHSA-vcmv-6rxx-fh7r OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor |
Medium EPSS 1.46% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-vcmv-6rxx-fh7r OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor |
Medium EPSS 1.46% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-hqfx-4x4w-vmwp Openstack nova qcow format could expose host filesystem information |
Low EPSS 0.74% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-hqfx-4x4w-vmwp Openstack nova qcow format could expose host filesystem information |
Low EPSS 0.74% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-vqp6-j452-j6wp Open Redirect in CPython that affects users of OpenStack Nova |
Medium EPSS 26.79% |
>= 23.0.0, < 23.0.3 | 23.0.3 |
| GHSA-vqp6-j452-j6wp Open Redirect in CPython that affects users of OpenStack Nova |
Medium EPSS 26.79% |
< 21.2.3 | 21.2.3 |
| GHSA-vqp6-j452-j6wp Open Redirect in CPython that affects users of OpenStack Nova |
Medium EPSS 26.79% |
>= 22.0.0, < 22.2.3 | 22.2.3 |
| GHSA-vqp6-j452-j6wp Open Redirect in CPython that affects users of OpenStack Nova |
Medium EPSS 26.79% |
< 21.2.3>= 22.0.0, < 22.2.3>= 23.0.0, < 23.0.3 | 21.2.322.2.323.0.3 |
| GHSA-c7w7-9c85-4qxv OpenStack Nova Live migration fails to update persistent domain XML |
High EPSS 1.73% |
< 19.3.1>= 20.0.0, < 20.3.1>= 21.0.0, < 21.1.0 | 19.3.120.3.121.1.0 |
| GHSA-c7w7-9c85-4qxv OpenStack Nova Live migration fails to update persistent domain XML |
High EPSS 1.73% |
< 19.3.1 | 19.3.1 |
| GHSA-c7w7-9c85-4qxv OpenStack Nova Live migration fails to update persistent domain XML |
High EPSS 1.73% |
>= 20.0.0, < 20.3.1 | 20.3.1 |
| GHSA-c7w7-9c85-4qxv OpenStack Nova Live migration fails to update persistent domain XML |
High EPSS 1.73% |
No fix yet | |
| GHSA-pg64-r7rr-phv8 OpenStack Nova Server Resource Faults Leak External Exception Details |
Medium EPSS 1.94% |
< 17.0.12 | 17.0.12 |
| GHSA-pg64-r7rr-phv8 OpenStack Nova Server Resource Faults Leak External Exception Details |
Medium EPSS 1.94% |
>= 19.0.0, < 19.0.2< 17.0.12>= 18.0.0, < 18.2.2 | 17.0.1218.2.219.0.2 |
| GHSA-pg64-r7rr-phv8 OpenStack Nova Server Resource Faults Leak External Exception Details |
Medium EPSS 1.94% |
>= 19.0.0, < 19.0.2 | 19.0.2 |
| GHSA-pg64-r7rr-phv8 OpenStack Nova Server Resource Faults Leak External Exception Details |
Medium EPSS 1.94% |
>= 18.0.0, < 18.2.2 | 18.2.2 |
| GHSA-97fv-22hc-mrgj OpenStack Compute (Nova) Improper Access Control |
Medium EPSS 0.34% |
< 15.0.0.0b1 | 15.0.0.0b1 |
| GHSA-97fv-22hc-mrgj OpenStack Compute (Nova) Improper Access Control |
Medium EPSS 0.34% |
< 15.0.0.0b1 | 15.0.0.0b1 |
| GHSA-w429-xc55-hc48 OpenStack Nova host data leak to vm instance in rescue mode |
Low EPSS 1.49% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-w429-xc55-hc48 OpenStack Nova host data leak to vm instance in rescue mode |
Low EPSS 1.49% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-jv34-xvjq-ppch OpenStack Nova VMWare driver leaks rescued images |
Medium EPSS 0.70% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-jv34-xvjq-ppch OpenStack Nova VMWare driver leaks rescued images |
Medium EPSS 0.70% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-99rx-9x8v-9j8p OpenStack Nova Live migration can leak root disk into ephemeral storage |
High EPSS 2.44% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-99rx-9x8v-9j8p OpenStack Nova Live migration can leak root disk into ephemeral storage |
High EPSS 2.44% |
< 12.0.0a0 | 12.0.0a0 |
| PYSEC-2013-45 keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which… Withdrawn |
Not rated yet | all versions | No fix yet |
| GHSA-qfp8-hfqx-c79c OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM |
Medium EPSS 2.14% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-63fq-8fp9-vhwq OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function |
Medium EPSS 2.74% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-qfp8-hfqx-c79c OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM |
Medium EPSS 2.14% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-63fq-8fp9-vhwq OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function |
Medium EPSS 2.74% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-rwhr-h69g-8qmq OpenStack Nova Information leak in libvirt LVM-backed instances |
Medium EPSS 1.35% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-rwhr-h69g-8qmq OpenStack Nova Information leak in libvirt LVM-backed instances |
Medium EPSS 1.35% |
No fix yet | |
| GHSA-rwhr-h69g-8qmq OpenStack Nova Information leak in libvirt LVM-backed instances |
Medium EPSS 1.35% |
all versions | No fix yet |
| GHSA-xc4g-7vw8-924h Arbitrary file overwrite in OpenStack Nova |
Medium EPSS 1.93% |
< 12.0.0 | 12.0.0 |
| GHSA-xc4g-7vw8-924h Arbitrary file overwrite in OpenStack Nova |
Medium EPSS 1.93% |
all versions | No fix yet |
| GHSA-cm54-3vvf-f5p8 OpenStack Nova Arbitrary file injection/corruption through directory traversal issues |
Medium EPSS 2.60% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-m454-cm7h-rqhh OpenStack Nova Directory traversal vulnerability |
Medium EPSS 3.02% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-m454-cm7h-rqhh OpenStack Nova Directory traversal vulnerability |
Medium EPSS 3.02% |
all versions | No fix yet |
| GHSA-cm54-3vvf-f5p8 OpenStack Nova Arbitrary file injection/corruption through directory traversal issues |
Medium EPSS 2.60% |
all versions | No fix yet |
| GHSA-xxgm-qpj5-4886 OpenStack Nova Scheduler denial of service through scheduler_hints |
Low EPSS 1.86% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-xxgm-qpj5-4886 OpenStack Nova Scheduler denial of service through scheduler_hints |
Low EPSS 1.86% |
all versions | No fix yet |
| GHSA-46r8-9cj7-pw6g OpenStack Compute (Nova) Improper Input Validation |
Medium EPSS 2.60% |
< 12.0.0a0 | 12.0.0a0 |
| GHSA-46r8-9cj7-pw6g OpenStack Compute (Nova) Improper Input Validation |
Medium EPSS 2.60% |
all versions | No fix yet |
| GHSA-hq3f-9gf7-73r8 Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules |
Low EPSS 1.46% |
all versions | No fix yet |
| GHSA-hq3f-9gf7-73r8 Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules |
Low EPSS 1.46% |
< 12.0.0a0 | 12.0.0a0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor