Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2686
  • PyPI/nova
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints 13 Jul
  • Fix available
  • Severity - 5.4 (Medium)
PYSEC-2026-2685
  • PyPI/nova
OpenStack Nova calls qemu-img without format restrictions for resize 13 Jul
  • No fix available
  • Severity - 8.2 (High)
PYSEC-2026-1709
  • PyPI/nova
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data 07 Jul
  • No fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1708
  • PyPI/nova
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access 07 Jul
  • No fix available
  • Severity - 7.1 (High)
PYSEC-2026-868
  • PyPI/nova
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal 07 Jul
  • Fix available
  • Severity - 5.7 (Medium)
PYSEC-2026-882
  • PyPI/nova
OpenStack Nova Changing vnic_type breaks compute service restart 06 Jul
  • Fix available
  • Severity - 3.3 (Low)
PYSEC-2026-857
  • PyPI/nova
OpenStack Nova can leak consoleauth token into log files 06 Jul
  • Fix available
  • Severity - 3.3 (Low)
PYSEC-2026-862
  • PyPI/nova
OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors 06 Jul
  • Fix available
PYSEC-2026-875
  • PyPI/nova
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack 06 Jul
  • Fix available
PYSEC-2026-859
  • PyPI/nova
OpenStack Compute Nova Improper Access Control 06 Jul
  • Fix available
PYSEC-2026-876
  • PyPI/nova
OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image 06 Jul
  • Fix available
  • Severity - 6.9 (Medium)
PYSEC-2026-858
  • PyPI/nova
OpenStack Nova Router metadata queries are not restricted by tenant 06 Jul
  • Fix available
PYSEC-2026-865
  • PyPI/nova
OpenStack Nova denial of service through compressed disk images 06 Jul
  • Fix available
PYSEC-2026-878
  • PyPI/nova
OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests 06 Jul
  • Fix available
  • Severity - 5.2 (Medium)
PYSEC-2026-860
  • PyPI/nova
OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image 06 Jul
  • Fix available
PYSEC-2026-871
  • PyPI/nova
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption 06 Jul
  • Fix available
  • Severity - 7.5 (High)