GHSA-F2FF-P2WW-7P4P vulnerabilities

Vulnerabilities for packages: airflow-core, openstack-glance-2025.1-fips, authentik, label-studio, openstack-nova-2025.2, airflow-postgres-fips, openstack-horizon-2026.1-fips, openstack-placement-2025.2-fips, openstack-placement-2025.1-fips, openstack-keystone-2025.2,...

CVE-2026-8404 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

GHSA-H7PC-VWP9-298G vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

GHSA-8CJM-8MP7-R2XF vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

CVE-2026-6873 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

CVE-2026-48587 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

GHSA-923M-GV2P-W5QP vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

CVE-2026-53878 vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

GHSA-CRHF-3PFG-W68W vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

GHSA-3H9F-R86X-QVJX vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

CVE-2026-53877 vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

CVE-2026-48588 vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

GHSA-8QCX-XF44-272X vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: airflow-core, openstack-kolla-toolbox-2025.2, tritonserver-backend-vllm-cuda-13.0, dask-kubernetes-fips, authentik, vast-csi, vllm-cuda-13.2, dbt-bigquery, ggshield, litellm, mitmproxy, openstack-placement-2026.1, openstack-nova-2025.2, apache-beam-python-3.12-sdk,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: airflow-core, openstack-kolla-toolbox-2025.2, tritonserver-backend-vllm-cuda-13.0, dask-kubernetes-fips, authentik, vast-csi, vllm-cuda-13.2, dbt-bigquery, ggshield, litellm, mitmproxy, openstack-placement-2026.1, openstack-nova-2025.2, apache-beam-python-3.12-sdk,...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1-fips, authentik, openstack-placement-2026.1, openstack-nova-2025.2, apache-beam-python-3.12-sdk, openstack-nova-2026.1, openstack-horizon-2026.1-fips, openstack-placement-2025.2-fips, apache-beam-python-3.11-sdk, openstack-placement-2025.1-fip...

CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1-fips, authentik, openstack-placement-2026.1, openstack-nova-2025.2, apache-beam-python-3.12-sdk, openstack-nova-2026.1, openstack-horizon-2026.1-fips, openstack-placement-2025.2-fips, apache-beam-python-3.11-sdk, openstack-placement-2025.1-fip...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: wazuh-manager-fips, py3-pipenv, openstack-glance-2025.1-fips, authentik, vast-csi, dbt-bigquery, label-studio, openstack-placement-2026.1, spamcheck, openstack-horizon-2026.1-fips, azure-functions-python-worker, pypy-3.10, openstack-placement-2025.2-fips, httpie,...

PYSEC-2026-2519 OpenStack Horizon RC file generation does not escape special characters in project names

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability...

PYSEC-2026-2520 OpenStack Horizon has Incorrect Behavior Order

An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix...