python-heatclient (1.1.1), python-muranoclient (>=0.8.5, <=0.8.6) +1 more potentially affected by CVE-2023-6110 via python-openstackclient (3.3.0)

python-openstackclient PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-openstackclient and may be impacted: - python-heatclient 1.1.1 - python-muranoclient =0.8.5, =0.11.2, =0.14.1 Source cves: CVE-2023-6110 Source advisory:...

python-muranoclient (>=0.5.8, <=0.6.0) potentially affected by CVE-2024-29156 via yaql (0.2.7)

yaql PYPI version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on yaql and may be impacted: - python-muranoclient =0.5.8, =0.6.0 Source cves: CVE-2024-29156 Source advisory: OSV:PYSEC-2026-2059...

python-heatclient (1.1.1), python-muranoclient (>=0.8.5, <=0.8.6) +1 more potentially affected by CVE-2023-6110 via python-openstackclient (3.3.0)

python-openstackclient PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-openstackclient and may be impacted: - python-heatclient 1.1.1 - python-muranoclient =0.8.5, =0.11.2, =0.14.1 Source cves: CVE-2023-6110 Source advisory:...

python-muranoclient (>=0.5.8, <=0.6.0) potentially affected by CVE-2024-29156 via yaql (0.2.7)

yaql PYPI version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on yaql and may be impacted: - python-muranoclient =0.5.8, =0.6.0 Source cves: CVE-2024-29156 Source advisory: OSV:GHSA-MVF6-HWXH-7V76...

python-muranoclient (>=0.5.8, <=0.6.0), slacktivate (>=0.2.1, <=0.2.26) +1 more potentially affected by CVE-2024-29156 via yaql (>=0.2.7, <=2.0.1)

yaql PYPI version =0.2.7, =0.5.8, =0.2.1, =0.2.26 - yglu 1.1.2 Source cves: CVE-2024-29156 Source advisory: MEND:CVE-2024-29156...

CVE-2016-4972

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

CVE-2016-4972

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

CVE-2016-4972

CVE-2016-4972 – OpenStack Murano YAML loader misuse leading to RCE . Affected: OpenStack Murano (pre-1.0.3, Liberty) and Murano 2.x before 2.0.1 (Mitaka); Murano-dashboard before 1.0.3 and 2.x before 2.0.1; python-muranoclient before 0.7.3 (Liberty) and 0.8.x before 0.8.5 (Mitaka). Detail: Murano...

CVE-2016-4972

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

CVE-2016-4972

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

CVE-2016-4972: Improper Input Validation

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...