networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2026-50266 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2026-50266 Source advisory:...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2026-50266 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2023-3637 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2023-3637 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2023-3637 Source advisory:...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2022-3277 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2022-3277 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2022-3277 Source advisory:...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2015-3221 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2015-3221 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2015-3221 Source advisory:...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2017-7543 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2017-7543 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2017-7543 Source advisory:...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2026-50266 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2026-50266 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2026-50266 Source advisory:...

networking-bagpipe (>=8.0.1, <=10.0.1), networking-baremetal (1.0.1) +8 more potentially affected by CVE-2026-50266 via neutron (>=12.1.1, <=15.3.4)

neutron PYPI version =12.1.1, =8.0.1, =15.0.0, =13.0.1, =5.1.0, =13.0.2, =13.0.2, =14.0.1, =14.3.0 Source cves: CVE-2026-50266 Source advisory: MEND:CVE-2026-50266...

EUVD-2017-1520

Malware in sbrugna...

EUVD-2022-3970

Malicious code in bioql PyPI...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +17 more potentially affected by CVE-2025-29314 via org.opendaylight.sfc:odl-sfc-openflow-renderer (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:odl-sfc-openflow-renderer MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.5.0, =0.5.2 and more Source cves: CVE-2025-29314 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +19 more potentially affected by CVE-2025-29314 via org.opendaylight.sfc:odl-sfc-ovs (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:odl-sfc-ovs MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.4.4-carbon and more Source cves: CVE-2025-29314 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +17 more potentially affected by CVE-2025-29313 via org.opendaylight.sfc:odl-sfc-openflow-renderer (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:odl-sfc-openflow-renderer MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.5.0, =0.5.2 and more Source cves: CVE-2025-29313 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +17 more potentially affected by CVE-2025-29314 via org.opendaylight.sfc:odl-sfc-openflow-renderer (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:odl-sfc-openflow-renderer MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.5.0, =0.5.2 and more Source cves: CVE-2025-29314 Source advisory:...

Missing Encryption of Sensitive Data

Overview Affected versions of this package are vulnerable to Missing Encryption of Sensitive Data due to the use of insecure Shiro options secureCookies=False and httpOnly=False. An attacker in a MitM position can access sensitive information in transit. Remediation There is no fixed version for...