tripleo-quickstart (2.1.1) potentially affected by CVE-2025-14010 via ansible (2.5.7)

ansible PYPI version 2.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - tripleo-quickstart 2.1.1 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

tripleo-quickstart (2.1.1) potentially affected by CVE-2023-5115 via ansible (2.5.7)

ansible PYPI version 2.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - tripleo-quickstart 2.1.1 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

PYSEC-2026-1052 tripleo-ansible may disclose important configuration details from an OpenStack deployment

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information...

PYSEC-2026-1051 tripleo-ansible may disclose important configuration details from an OpenStack deployment

A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file, leading to information disclosure of...

Openstack tripleo-heat-templates unauthenticated file access

A resource-permission flaw was found in the tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thu...

PYSEC-2026-754 Openstack tripleo-heat-templates unauthenticated file access

A resource-permission flaw was found in the tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thu...

Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates

An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the wwwauthenticateuri parameter which is visible to all end users in configuration files. This would give sensitive...

PYSEC-2026-753 Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates

An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the wwwauthenticateuri parameter which is visible to all end users in configuration files. This would give sensitive...

tripleo-quickstart (2.1.1) potentially affected by CVE-2025-14010 via ansible (2.5.7)

ansible PYPI version 2.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - tripleo-quickstart 2.1.1 Source cves: CVE-2025-14010 Source advisory: OSV:GHSA-8GGH-XWR9-3373...

EUVD-2016-3205

Malware in sbrugna...

EUVD-2015-5300

Malware in sbrugna...

EUVD-2016-10403

Malware in sbrugna...

EUVD-2018-0141

Malware in sbrugna...

EUVD-2016-0035

Malware in sbrugna...

EUVD-2016-0034

Malware in sbrugna...

EUVD-2021-18793

Malware in sbrugna...

EUVD-2023-0934

Malicious code in bioql PyPI...

EUVD-2023-1127

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-4180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this...

Linux Distros Unpatched Vulnerability : CVE-2021-3585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager. CVE-2021-35...