2309 matches found
controlled-execution-system (>=0.1.25, <=0.1.31), wandelbots-nova (>=5.1.2, <=5.7.4) potentially affected by CVE-2026-47103 via python-statemachine (>=3.0.0, <=3.1.2)
python-statemachine PYPI version =3.0.0, =0.1.25, =5.1.2, =5.7.4 Source cves: CVE-2026-47103 Source advisory: OSV:GHSA-V4JC-PM6R-3VJ8...
controlled-execution-system (>=0.1.25, <=0.1.31), wandelbots-nova (>=5.1.2, <=5.7.4) potentially affected by CVE-2026-47103 via python-statemachine (>=3.0.0, <=3.1.2)
python-statemachine PYPI version =3.0.0, =0.1.25, =5.1.2, =5.7.4 Source cves: CVE-2026-47103 Source advisory: SNYK:PYTHON-PYTHONSTATEMACHINE-17675195...
CVE-2026-46448
A flaw was found in OpenStack Nova. The server creation application programming interface API fails to remove specific hint data, leading to instances being created without proper Placement allocation. This can result in a denial of service, as resources may not be correctly assigned or managed f...
controlled-execution-system (>=0.1.25, <=0.1.31), wandelbots-nova (>=5.1.2, <=5.7.4) potentially affected by CVE-2026-47103 via python-statemachine (>=3.0.0, <=3.1.2)
python-statemachine PYPI version =3.0.0, =0.1.25, =5.1.2, =5.7.4 Source cves: CVE-2026-47103 Source advisory: MEND:CVE-2026-47103...
MAL-2026-6043 Malicious code in @mastra/voice-aws-nova-sonic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c109adf5a77f9ace07bb1f5ec93cd8d3464bf675b7a93abc5fdfd64669f0c75 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Linux Distros Unpatched Vulnerability : CVE-2026-46448
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation. CVE-2026-46448 Note...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Nova vulnerability (USN-8434-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8434-1 advisory. It was discovered that Nova did not strip internal nova-prefixed scheduler hints supplied by users on instance creation. An attack...
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Affects - Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...
EUVD-2026-37218
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
GHSA-MFG3-P6M3-GJGR OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Affects - Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...
Incorrect Resource Transfer Between Spheres
Overview nova is an OpenStack Nova provides a cloud computing fabric controller, supporting a wide variety of compute technologies, including: libvirt KVM, Xen, LXC and more, Hyper-V, VMware, XenServer, OpenStack Ironic and PowerVM. Affected versions of this package are vulnerable to Incorrect...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
USN-8434-1 nova vulnerability
It was discovered that Nova did not strip internal nova-prefixed scheduler hints supplied by users on instance creation. An attacker could possibly use this issue to bypass Placement resource claims and scheduling constraint enforcement...
CVE-2026-46448: Incorrect Resource Transfer Between Spheres
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
UBUNTU-CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
PT-2026-49828
Name of the Vulnerable Software and Affected Versions OpenStack Nova versions prior to 33.0.2 Description The server create API does not strip certain hint data, which results in the created instance having no Placement allocation. Recommendations Update to version 33.0.2...
