CVE-2013-4179 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-J6XH-Q826-55JW vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3517 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2013-2256 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3708 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2015-0259 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

GHSA-MFG3-P6M3-GJGR vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2026-46448 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

OpenStack's Mistral Client has a local file inclusion vulnerability

The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content...

PYSEC-2026-1490 OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...

PYSEC-2026-1849 OpenStack's Mistral Client has a local file inclusion vulnerability

The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content...

OpenStack Neutron can use an incorrect ID during policy enforcement

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...

PYSEC-2026-1693 OpenStack Neutron can use an incorrect ID during policy enforcement

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...

OpenStack improperly deletes access rules

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials...

PYSEC-2026-1853 OpenStack improperly deletes access rules

A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials...

teflo-openstack-client-plugin (1.0.2) potentially affected by CVE-2023-6110 via python-openstackclient (5.5.0)

python-openstackclient PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-openstackclient and may be impacted: - teflo-openstack-client-plugin 1.0.2 Source cves: CVE-2023-6110 Source advisory: OSV:PYSEC-2026-1853...

OpenStack Ironic fails to verify checksums of supplied image_source URLs

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

PYSEC-2026-1468 OpenStack Ironic fails to verify checksums of supplied image_source URLs

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

openstack-heat may disclose sensitive information

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...

PYSEC-2026-1750 openstack-heat may disclose sensitive information

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...